github.com/devseccon/trivy@v0.47.1-0.20231123133102-bd902a0bd996/pkg/vex/testdata/cyclonedx.json (about)

     1  {
     2    "bomFormat": "CycloneDX",
     3    "specVersion": "1.5",
     4    "version": 1,
     5    "vulnerabilities": [
     6      {
     7        "id": "CVE-2018-7489",
     8        "source": {
     9          "name": "NVD",
    10          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-9997"
    11        },
    12        "analysis": {
    13          "state": "not_affected",
    14          "justification": "code_not_reachable"
    15        },
    16        "affects": [
    17          {
    18            "ref": "urn:cdx:3e671687-395b-41f5-a30f-a58921a69b79/1#jackson-databind-2.8.0"
    19          }
    20        ]
    21      }
    22    ]
    23  }