tree 29368805ba24e05089c5381a8e427c98d3188f48
parent 0be10a336e28cdfa01f9b3dfde9b94dd2acf5b47
author Jonathan Amsterdam <jba@google.com> 1639481901 -0500
committer Jonathan Amsterdam <jba@google.com> 1639556661 +0000

vuln: reports can have multiple CVEs

A report can be associated with multiple CVEs.

The osv.Entry type already accommodated this, but the report.Report
type did not, so added Report.CVEs.

For backwards compatibility and easy of writing reports, leave
Report.CVE. The linter checks that at most one of CVE and CVEs is
populated.

Along the way, correct minor issues with style and doc.

Change-Id: Ib28aa4f022f9e01c2cfdf17a1d69dcac6a71b8dc
Reviewed-on: https://go-review.googlesource.com/c/vuln/+/371596
Trust: Jonathan Amsterdam <jba@google.com>
Run-TryBot: Jonathan Amsterdam <jba@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Julie Qiu <julie@golang.org>