org.spdx.spdx_to_osv.osvmodel.OsvAffects Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of spdx-to-osv Show documentation

Produces an OSV vulnerability JSON report from an SPDX file

There is a newer version: 0.1.2

/**
 * SPDX-License-Identifier: Apache-2.0
 * Copyright (c) 2021 Source Auditor Inc.
 */
package org.spdx.spdx_to_osv.osvmodel;

import java.util.List;

/**
 * OSV affects object as described at https://docs.google.com/document/d/1sylBGNooKtf220RHQn1I8pZRmqXZQADDQ_TOABrKTpA/edit
 * 
 * @author Gary O'Neall
 */
@Deprecated
public class OsvAffects {
    
    /**
     * Required (at least one entry). The commit/version ranges that contain this vulnerability.
     * 
     * When provided, OSV will attempt to detect and append additional ranges 
     * that may be affected as well (e.g. cherry-picks to other branches).
     */
    List ranges;
    
    /**
     * Optional. List of affected versions. This should match tag names in the upstream repository. 
     * OSV will populate or add to this automatically based on the provided commit ranges.
     */
    List versions;
    
    /**
     * Required empty constructor
     */
    public OsvAffects() {
        
    }

    /**
     * @return the ranges
     */
    public List getRanges() {
        return ranges;
    }

    /**
     * @param ranges the ranges to set
     */
    public void setRanges(List ranges) {
        this.ranges = ranges;
    }

    /**
     * @return the versions
     */
    public List getVersions() {
        return versions;
    }

    /**
     * @param versions the versions to set
     */
    public void setVersions(List versions) {
        this.versions = versions;
    }

}