cmd

type VulnScanOutput struct {
	Matches []struct {
		Vulnerability struct {
			ID          string `json:"id"`
			Severity    string `json:"severity"`
			Description string `json:"description"`
			Fix         struct {
				Versions []string `json:"versions"`
			} `json:"fix"`
			URLs []string `json:"urls"`
			CVSS []struct {
				Score float64 `json:"score"`
			} `json:"cvss"`
		} `json:"vulnerability"`
		Artifact struct {
			Name    string `json:"name"`
			Version string `json:"version"`
			PURL    string `json:"purl"`
		} `json:"artifact"`
	} `json:"matches"`
	// Simple format fallback
	Vulnerabilities []VulnScanResult `json:"vulnerabilities,omitempty"`
}

type VulnScanResult struct {
	ID              string   `json:"id"`
	Severity        string   `json:"severity"`
	Package         string   `json:"package"`
	Version         string   `json:"version"`
	FixedVersion    string   `json:"fixed_version,omitempty"`
	CVSS            float64  `json:"cvss,omitempty"`
	EPSSScore       float64  `json:"epss_score,omitempty"`
	Description     string   `json:"description,omitempty"`
	References      []string `json:"references,omitempty"`
	AffectedPackage string   `json:"affected_package,omitempty"`
}