schemas

type AnalyzeResult struct {
	// Artifact is the analyzed image reference
	Artifact ArtifactReference `json:"artifact" yaml:"artifact"`

	// ScanTime is when the scan was performed
	ScanTime time.Time `json:"scanTime" yaml:"scanTime"`

	// Vulnerabilities is the list of found vulnerabilities
	Vulnerabilities []Vulnerability `json:"vulnerabilities" yaml:"vulnerabilities"`

	// Summary provides aggregated statistics
	Summary VulnerabilitySummary `json:"summary" yaml:"summary"`
}

type ArtifactReference struct {
	Host         string  `json:"host"`             // e.g., region-docker.pkg.dev
	ProjectID    string  `json:"projectID"`        // e.g., my-project-id
	RepositoryID string  `json:"repositoryID"`     // e.g., my-app-repo
	ImageName    string  `json:"imageName"`        // e.g., my-service/worker
	Tag          *string `json:"tag,omitempty"`    // e.g., v1.0.0 (nil if not present)
	Digest       *string `json:"digest,omitempty"` // e.g., sha256:e3b0... (nil if not present)
}

type Severity string

type Vulnerability struct {
	// ID is the CVE identifier
	ID string `json:"id" yaml:"id"`

	// Severity is the vulnerability severity level
	Severity Severity `json:"severity" yaml:"severity"`

	// PackageName is the affected package
	PackageName string `json:"packageName" yaml:"packageName"`

	// InstalledVersion is the currently installed version
	InstalledVersion string `json:"installedVersion" yaml:"installedVersion"`

	// FixedVersion is the version that fixes the vulnerability (if available)
	FixedVersion string `json:"fixedVersion,omitempty" yaml:"fixedVersion,omitempty"`

	// PackageType indicates the type/category of the vulnerability
	PackageType string `json:"packageType" yaml:"packageType"`

	// Description provides details about the vulnerability
	Description string `json:"description" yaml:"description"`

	// CVSSScore is the CVSS score
	CVSSScore float32 `json:"cvssScore" yaml:"cvssScore"`

	// URLs contains reference links
	URLs []string `json:"urls,omitempty" yaml:"urls,omitempty"`
}

type VulnerabilitySummary struct {
	// TotalCount is the total number of vulnerabilities
	TotalCount int `json:"totalCount" yaml:"totalCount"`

	// CountBySeverity maps severity levels to counts
	CountBySeverity map[Severity]int `json:"countBySeverity" yaml:"countBySeverity"`

	// FixableCount is the number of vulnerabilities with fixes available
	FixableCount int `json:"fixableCount" yaml:"fixableCount"`
}