aboutcode-org / aboutcode-org/vulnerablecode

Incorrect types for `related_ssvc_trees` and `fixed_by_packages` in OpenAPI schema

Ouverte
#2,364 1 commentaire 1 réaction 0 personnes assignées Voir sur GitHub
Langage dominant
Python
Étoiles
702
Forks
328
Merge moyen
3 j 8 h
PR mergées (30 j)
3

Description

Hi! I noticed another deficiency in the OpenAPI schema, for the `AdvisoryV3` and `AffectedByAdvisoryV3` schemas the `related_ssvc_trees` and `fixed_by_packages` properties are defined as string-type fields

```json
"related_ssvc_trees": {
"type": "string",
"readOnly": true
},
"fixed_by_packages": {
"type": "string",
"readOnly": true
}
```

though `related_ssvc_trees` is an array of objects, and `fixed_by_packages` is an array of strings, so should be something like

```json
"related_ssvc_trees": {
"type": "array",
"items": {
"$ref": "#/components/schemas/RelatedSSVCTree"
},
"readOnly": true
},
"fixed_by_packages": {
"type": "array",
"items": {
"type": "string"
},
"readOnly": true
}
```

Guide de contribution

Aucun guide de contribution indexé pour ce dépôt

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.