Add date information to OS schema

schema/vulnerability/os/schema-1.0.2.json

@@ -0,0 +1,199 @@
+{
+  "$schema": "http://json-schema.org/draft-04/schema#",
+  "type": "object",
+  "title": "os-vulnerability",
+  "description": "represents vulnerability records for common linux distributions",
+  "properties": {
+    "Vulnerability": {
+      "type": "object",
+      "properties": {
+        "CVSS": {
+          "type": "array",
+          "items": [
+            {
+              "type": "object",
+              "properties": {
+                "base_metrics": {
+                  "type": "object",
+                  "properties": {
+                    "base_score": {
+                      "type": "number"
+                    },
+                    "base_severity": {
+                      "type": "string"
+                    },
+                    "exploitability_score": {
+                      "type": "number"
+                    },
+                    "impact_score": {
+                      "type": "number"
+                    }
+                  },
+                  "required": [
+                    "base_score",
+                    "base_severity",
+                    "exploitability_score",
+                    "impact_score"
+                  ]
+                },
+                "status": {
+                  "type": "string"
+                },
+                "vector_string": {
+                  "type": "string"
+                },
+                "version": {
+                  "type": "string"
+                }
+              },
+              "required": [
+                "base_metrics",
+                "status",
+                "vector_string",
+                "version"
+              ]
+            }
+          ]
+        },
+        "Description": {
+          "type": "string"
+        },
+        "FixedIn": {
+          "type": "array",
+          "items": [
+            {
+              "type": "object",
+              "properties": {
+                "Name": {
+                  "type": "string"
+                },
+                "NamespaceName": {
+                  "type": "string"
+                },
+                "VendorAdvisory": {
+                  "type": "object",
+                  "properties": {
+                    "AdvisorySummary": {
+                      "type": "array",
+                      "items": {}
+                    },
+                    "NoAdvisory": {
+                      "type": "boolean"
+                    }
+                  },
+                  "required": [
+                    "NoAdvisory"
+                  ]
+                },
+                "Version": {
+                  "type": "string"
+                },
+                "VersionFormat": {
+                  "type": "string"
+                },
+                "VulnerableRange": {
+                  "type": ["string", "null"]
+                },
+                "Module": {
+                  "type": ["string", "null"]
+                },
+                "Issued": {
+                  "type": "string",
+                  "description": "date the fix was made available"
+                }
+              },
+              "required": [
+                "Name",
+                "NamespaceName",
+                "Version",
+                "VersionFormat"
+              ]
+            }
+          ]
+        },
+        "Link": {
+          "type": "string"
+        },
+        "Metadata": {
+          "type": "object",
+          "properties": {
+            "Issued": {
+              "type": "string",
+              "description": "date the vulnerability was published"
+            },
+            "Updated": {
+              "type": "string",
+              "description": "date the vulnerability was last updated"
+            },
+            "Withdrawn": {
+              "type": "string",
+              "description": "date the vulnerability was withdrawn"
+            },
+            "RefId": {
+              "type": "string"
+            },
+            "CVE": {
+              "type": "array",
+              "items": [
+                {
+                  "type": "object",
+                  "properties": {
+                    "Name": {
+                      "type": "string"
+                    },
+                    "Link": {
+                      "type": "string"
+                    }
+                  },
+                  "required": [
+                    "Name"
+                  ]
+                }
+              ]
+            },
+            "NVD": {
+              "type": "object",
+              "properties": {
+                "CVSSv2": {
+                  "type": "object",
+                  "properties": {
+                    "Score": {
+                      "type": "number"
+                    },
+                    "Vectors": {
+                      "type": "string"
+                    }
+                  },
+                  "required": [
+                    "Score"
+                  ]
+                }
+              }
+            }
+          }
+        },
+        "Name": {
+          "type": "string"
+        },
+        "NamespaceName": {
+          "type": "string"
+        },
+        "Severity": {
+          "type": "string"
+        }
+      },
+      "required": [
+        "Description",
+        "FixedIn",
+        "Link",
+        "Metadata",
+        "Name",
+        "NamespaceName",
+        "Severity"
+      ]
+    }
+  },
+  "required": [
+    "Vulnerability"
+  ]
+}

src/vunnel/schema.py

@@ -10,7 +10,7 @@
 MATCH_EXCLUSION_SCHEMA_VERSION = "1.0.0"
 GITHUB_SECURITY_ADVISORY_SCHEMA_VERSION = "1.0.1"
 MSRC_SCHEMA_VERSION = "1.0.0"
-OS_SCHEMA_VERSION = "1.0.0"
+OS_SCHEMA_VERSION = "1.0.2"
 NVD_SCHEMA_VERSION = "1.0.0"
 OSV_SCHEMA_VERSION = "1.6.1"
 

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2018-1071.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2018-1083.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2018-25032.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2019-11922.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2019-13132.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2019-20044.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2019-6250.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2019-9210.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2020-14929.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2020-15166.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2021-24031.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2021-24032.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2021-38370.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2021-45444.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2022-1271.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/alpine/test-fixtures/snapshots/3.15/cve-2022-37434.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/amazon/test-fixtures/snapshots/amzn:2/alas-2018-939.json

@@ -99,5 +99,5 @@
       "Severity": "Critical"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/amazon/test-fixtures/snapshots/amzn:2022/alas-2021-001.json

@@ -105,5 +105,5 @@
       "Severity": "Medium"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/amazon/test-fixtures/snapshots/amzn:2023/alas-2023-126.json

@@ -90,5 +90,5 @@
       "Severity": "High"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/chainguard/test-fixtures/snapshots/chainguard:rolling/CVE-2007-2728.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/chainguard/test-fixtures/snapshots/chainguard:rolling/CVE-2007-3205.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/chainguard/test-fixtures/snapshots/chainguard:rolling/CVE-2007-4559.json

@@ -31,5 +31,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/chainguard/test-fixtures/snapshots/chainguard:rolling/CVE-2007-4596.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/chainguard/test-fixtures/snapshots/chainguard:rolling/CVE-2010-4756.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/chainguard/test-fixtures/snapshots/chainguard:rolling/CVE-2016-2102.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/chainguard/test-fixtures/snapshots/chainguard:rolling/CVE-2016-2781.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }

tests/unit/providers/chainguard/test-fixtures/snapshots/chainguard:rolling/CVE-2016-9131.json

@@ -19,5 +19,5 @@
       "Severity": "Unknown"
     }
   },
-  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.0.json"
+  "schema": "https://raw.githubusercontent.com/anchore/vunnel/main/schema/vulnerability/os/schema-1.0.2.json"
 }