Stdlib-only scanner per docs/17: Kubernetes API inventory, Trivy runner, persisted state, schema-validated report.json, strict acceptances parser, server-rendered page, aggregate metrics, internal API, and a scan loop that stays live while scanning. L1 tests under conformance/tests/l1-rendering/vuln-scanner-* run the actual modules against recorded fixtures with a fake Trivy runner. Co-Authored-By: Claude Opus 5.5 <[email protected]>
34 lines
653 B
JSON
34 lines
653 B
JSON
{
|
|
"ArtifactName": "x",
|
|
"Results": [
|
|
{
|
|
"Target": "t",
|
|
"Vulnerabilities": [
|
|
{
|
|
"CVSS": {
|
|
"nvd": {
|
|
"V3Score": 9.8
|
|
}
|
|
},
|
|
"FixedVersion": "3.0.2",
|
|
"InstalledVersion": "1.0",
|
|
"PkgName": "openssl",
|
|
"PrimaryURL": "https://example.test/CVE-2026-0001",
|
|
"Severity": "CRITICAL",
|
|
"Title": "OpenSSL flaw",
|
|
"VulnerabilityID": "CVE-2026-0001"
|
|
},
|
|
{
|
|
"InstalledVersion": "1.0",
|
|
"PkgName": "zlib",
|
|
"PrimaryURL": "https://example.test/CVE-2026-0002",
|
|
"Severity": "LOW",
|
|
"Title": "t",
|
|
"VulnerabilityID": "CVE-2026-0002"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"SchemaVersion": 2
|
|
}
|