| |
| # Copyright 2023 The Go Authors. All rights reserved. |
| # Use of this source code is governed by a BSD-style |
| # license that can be found in the LICENSE file. |
| |
| # Test repo in the shape of github.com/github/advisory-database |
| |
| -- advisories/github-reviewed/2022/12/GHSA-abcd-efgh-b123.json -- |
| { |
| "schema_version": "1.3.0", |
| "id": "GHSA-abcd-efgh-b123", |
| "aliases": [ |
| "CVE-20YY-XXXX" |
| ], |
| "summary": "Summary", |
| "details": "Longer form details.", |
| "affected": [ |
| { |
| "package": { |
| "ecosystem": "Go", |
| "name": "example/package" |
| }, |
| "ranges": [ |
| { |
| "type": "ECOSYSTEM", |
| "events": [ |
| { |
| "introduced": "0" |
| }, |
| { |
| "fixed": "0.3.1" |
| } |
| ] |
| } |
| ] |
| } |
| ], |
| "database_specific": { |
| "cwe_ids": [ |
| ], |
| "severity": "MODERATE", |
| "github_reviewed": true |
| } |
| } |
| -- advisories/github-reviewed/2021/10/GHSA-test-part-a123.json -- |
| { |
| "schema_version": "1.3.0", |
| "id": "GHSA-test-part-a123", |
| "aliases": [ |
| "CVE-2020-XXXX" |
| ], |
| "summary": "Short summary", |
| "affected": [ |
| { |
| "package": { |
| "ecosystem": "Go", |
| "name": "golang.org/x/example" |
| }, |
| "ranges": [ |
| { |
| "type": "ECOSYSTEM", |
| "events": [ |
| { |
| "introduced": "0" |
| }, |
| { |
| "fixed": "0.0.0-202" |
| } |
| ] |
| } |
| ], |
| "database_specific": { |
| "last_known_affected_version_range": "<= 0.0.0-202" |
| } |
| } |
| ], |
| "references": [ |
| { |
| "type": "WEB", |
| "url": "https://example.com/example/link" |
| } |
| ], |
| "database_specific": { |
| "cwe_ids": [ |
| "CWE-347" |
| ], |
| "severity": "MODERATE", |
| "github_reviewed": true |
| } |
| } |
| |
| -- advisories/github-reviewed/2022/10/GHSA-qwer-tyui-0987.json -- |
| { |
| "schema_version": "1.3.0", |
| "id": "GHSA-qwer-tyui-0987", |
| "aliases": [ |
| "CVE-2022-XXXXX" |
| ], |
| "summary": "An example report that isn't in the go ecosystem", |
| "details": "The longer description of the example", |
| "severity": [ |
| { |
| "type": "CVSS_V3", |
| "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" |
| } |
| ], |
| "affected": [ |
| { |
| "package": { |
| "ecosystem": "Maven", |
| "name": "org.example.subexample" |
| }, |
| "ranges": [ |
| { |
| "type": "ECOSYSTEM", |
| "events": [ |
| { |
| "introduced": "0" |
| }, |
| { |
| "fixed": "1.1.4" |
| } |
| ] |
| } |
| ] |
| } |
| ], |
| "references": [ |
| { |
| "type": "ADVISORY", |
| "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-XXXXX" |
| }, |
| { |
| "type": "PACKAGE", |
| "url": "https://example.com/package" |
| }, |
| { |
| "type": "WEB", |
| "url": "https://example.org/news.html" |
| } |
| ], |
| "database_specific": { |
| "cwe_ids": [ |
| "CWE-79" |
| ], |
| "severity": "MODERATE", |
| "github_reviewed": true |
| } |
| } |
| |
| -- advisories/unreviewed/2023/01/GHSA-abcd-untouched.json -- |
| { |
| "schema_version": "1.3.0", |
| "id": "GHSA-abcd-untouched", |
| "aliases": [ |
| "CVE-2022-XXXX" |
| ], |
| "details": "Because this is unreveiwed, it shouldn't even be considered", |
| "severity": [ |
| ], |
| "affected": [ |
| ], |
| "references": [ |
| { |
| "type": "ADVISORY", |
| "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4099" |
| }, |
| { |
| "type": "WEB", |
| "url": "https://wpscan.com/vulnerability/a282dd39-926d-406b-b8f5-e4c6e0c2c028" |
| } |
| ], |
| "database_specific": { |
| "cwe_ids": [ |
| "CWE-89" |
| ], |
| "severity": null, |
| "github_reviewed": false |
| } |
| } |
| |
| -- README.md -- |
| This should be ignored |
