Updates to query vulnerabilities response with grype provider

anchore / anchore-engine

A service that analyzes docker images and scans for vulnerabilities

Apache License 2.0

1.58k stars 271 forks source link

Closed nightfurys closed 3 years ago

nightfurys commented 3 years ago

Change the shape of references to be inline with legacy results - a list of objects where each object contains source and url attributes
Construct a link to the vulnerability when one is not available
Change the shape of cvss data to be inline with with legacy mode results
Assign the cvss data to nvd_data or vendor_data depending on vulnerability namespace

Signed-off-by: Swathi Gangisetty swathi@anchore.com

nightfurys commented 3 years ago

LGTM, +1 on some unit tests if there is time.

Thanks @dspalmer99 pushed a few unit tests that verify the changes