aboutcode-org / aboutcode-org/vulnerablecode

Incorrect types for `related_ssvc_trees` and `fixed_by_packages` in OpenAPI schema

Abierto
#2,364 1 comentario 1 reacción 0 asignados Ver en GitHub
Lenguaje dominante
Python
Estrellas
702
Forks
328
Merge medio
3 d 8 h
PR fusionados (30 d)
3

Descripción

Hi! I noticed another deficiency in the OpenAPI schema, for the `AdvisoryV3` and `AffectedByAdvisoryV3` schemas the `related_ssvc_trees` and `fixed_by_packages` properties are defined as string-type fields

```json
"related_ssvc_trees": {
"type": "string",
"readOnly": true
},
"fixed_by_packages": {
"type": "string",
"readOnly": true
}
```

though `related_ssvc_trees` is an array of objects, and `fixed_by_packages` is an array of strings, so should be something like

```json
"related_ssvc_trees": {
"type": "array",
"items": {
"$ref": "#/components/schemas/RelatedSSVCTree"
},
"readOnly": true
},
"fixed_by_packages": {
"type": "array",
"items": {
"type": "string"
},
"readOnly": true
}
```

Guía de contribución

No hay ninguna guía de contribución indexada para este repositorio

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.