Stdlib-only scanner per docs/17: Kubernetes API inventory, Trivy runner, persisted state, schema-validated report.json, strict acceptances parser, server-rendered page, aggregate metrics, internal API, and a scan loop that stays live while scanning. L1 tests under conformance/tests/l1-rendering/vuln-scanner-* run the actual modules against recorded fixtures with a fake Trivy runner. Co-Authored-By: Claude Opus 5.5 <[email protected]>
20 lines
330 B
JSON
20 lines
330 B
JSON
{
|
|
"ArtifactName": "x",
|
|
"Results": [
|
|
{
|
|
"Target": "t",
|
|
"Vulnerabilities": [
|
|
{
|
|
"InstalledVersion": "1.0",
|
|
"PkgName": "curl",
|
|
"PrimaryURL": "https://example.test/CVE-2026-0020",
|
|
"Severity": "MEDIUM",
|
|
"Title": "t",
|
|
"VulnerabilityID": "CVE-2026-0020"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"SchemaVersion": 2
|
|
}
|