Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ambiguity for annotations in vuln attestation #390

Open
lumjjb opened this issue Oct 11, 2024 · 1 comment
Open

Ambiguity for annotations in vuln attestation #390

lumjjb opened this issue Oct 11, 2024 · 1 comment

Comments

@lumjjb
Copy link

lumjjb commented Oct 11, 2024

In the vuln attestation, annotations are specified as an optional list, but the list is not typed.

Would this be a list of strings ["foo=bar"], or a struct
[ {{"key":"foo"}, {"value": "bar"}}], or a list of single maps? [{"foo": "bar"}]

scanner.result.[*].vulnerability.annotations, optional list

This is a list of key/value pairs where scanners can add additional custom information.
@hectorj2f
Copy link
Contributor

@lumjjb This would be more of a map <string, value> in my opinion.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants