github.com/google/osv-scalibr@v0.4.1/guidedremediation/testdata/maven/patchchoice/result.json (about)

     1  {
     2    "ecosystem": "Maven",
     3    "strategy": "override",
     4    "vulnerabilities": [
     5      {
     6        "id": "OSV-000-000",
     7        "packages": [
     8          {
     9            "name": "pkg:a",
    10            "version": "1.0.0"
    11          }
    12        ]
    13      },
    14      {
    15        "id": "OSV-000-001",
    16        "packages": [
    17          {
    18            "name": "pkg:b",
    19            "version": "1.0.0"
    20          }
    21        ]
    22      },
    23      {
    24        "id": "OSV-000-002",
    25        "packages": [
    26          {
    27            "name": "pkg:b",
    28            "version": "1.0.0"
    29          }
    30        ]
    31      },
    32      {
    33        "id": "OSV-000-003",
    34        "packages": [
    35          {
    36            "name": "pkg:c",
    37            "version": "1.0.0"
    38          }
    39        ]
    40      },
    41      {
    42        "id": "OSV-000-004",
    43        "packages": [
    44          {
    45            "name": "pkg:d",
    46            "version": "1.0.0"
    47          }
    48        ]
    49      },
    50      {
    51        "id": "OSV-000-005",
    52        "packages": [
    53          {
    54            "name": "pkg:d",
    55            "version": "1.0.0"
    56          }
    57        ]
    58      }
    59    ],
    60    "patches": [
    61      {
    62        "packageUpdates": [
    63          {
    64            "name": "pkg:b",
    65            "versionFrom": "1.0.0",
    66            "versionTo": "3.0.0",
    67            "transitive": false
    68          }
    69        ],
    70        "fixed": [
    71          {
    72            "id": "OSV-000-001",
    73            "packages": [
    74              {
    75                "name": "pkg:b",
    76                "version": "1.0.0"
    77              }
    78            ]
    79          },
    80          {
    81            "id": "OSV-000-002",
    82            "packages": [
    83              {
    84                "name": "pkg:b",
    85                "version": "1.0.0"
    86              }
    87            ]
    88          },
    89          {
    90            "id": "OSV-000-003",
    91            "packages": [
    92              {
    93                "name": "pkg:c",
    94                "version": "1.0.0"
    95              }
    96            ]
    97          }
    98        ]
    99      },
   100      {
   101        "packageUpdates": [
   102          {
   103            "name": "pkg:a",
   104            "versionFrom": "",
   105            "versionTo": "1.1.0",
   106            "transitive": true
   107          }
   108        ],
   109        "fixed": [
   110          {
   111            "id": "OSV-000-000",
   112            "packages": [
   113              {
   114                "name": "pkg:a",
   115                "version": "1.0.0"
   116              }
   117            ]
   118          }
   119        ]
   120      },
   121      {
   122        "packageUpdates": [
   123          {
   124            "name": "pkg:d",
   125            "versionFrom": "1.0.0",
   126            "versionTo": "2.0.0",
   127            "transitive": false
   128          }
   129        ],
   130        "fixed": [
   131          {
   132            "id": "OSV-000-004",
   133            "packages": [
   134              {
   135                "name": "pkg:d",
   136                "version": "1.0.0"
   137              }
   138            ]
   139          }
   140        ],
   141        "introduced": [
   142          {
   143            "id": "OSV-000-006",
   144            "packages": [
   145              {
   146                "name": "pkg:d",
   147                "version": "2.0.0"
   148              }
   149            ]
   150          }
   151        ]
   152      }
   153    ]
   154  }