vulnerabilityreport.go

package claircore

import "encoding/json"

// VulnerabilityReport provides a report of packages and their
// associated vulnerabilities.
type VulnerabilityReport struct {
	// the manifest hash this vulnerability report is describing
	Hash Digest `json:"manifest_hash"`
	// all discovered packages in this manifest keyed by package id
	Packages map[string]*Package `json:"packages"`
	// all discovered distributions in this manifest keyed by distribution id
	Distributions map[string]*Distribution `json:"distributions"`
	// all discovered repositories in this manifest keyed by repository id
	Repositories map[string]*Repository `json:"repository"`
	// a list of environment details a package was discovered in keyed by package id
	Environments map[string][]*Environment `json:"environments"`
	// all discovered vulnerabilities affecting this manifest
	Vulnerabilities map[string]*Vulnerability `json:"vulnerabilities"`
	// PackageVulnerabilities records the vulnerabilities associated with a
	// given package. Package and Vulnerability objects are referred to by their
	// ID.
	//
	// The Vulnerability objects with these IDs will have their "Invert" member
	// set to "false".
	PackageVulnerabilities map[string][]string `json:"package_vulnerabilities"`
	// a map of enrichments keyed by a type.
	Enrichments map[string][]json.RawMessage `json:"enrichments"`

	// PackageNotVulnerable records "not vulnerable" assertions provided by some
	// data sources.
	//
	// The Vulnerability objects with these IDs will have their "Invert" member
	// set to "true".
	PackageNotVulnerable map[string][]string
}