Skip to content

Commit ef546d4

Browse files
committed
feat: example of TEA Collection
Signed-off-by: Piotr P. Karwasz <[email protected]>
1 parent 2a3569d commit ef546d4

File tree

2 files changed

+90
-0
lines changed

2 files changed

+90
-0
lines changed

spec/openapi.yaml

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -387,6 +387,39 @@ components:
387387
description: List of TEA artifact objects.
388388
items:
389389
"$ref": "#/components/schemas/artifact"
390+
examples:
391+
# Documents in the latest release of Log4j Core
392+
- uuid: 4c72fe22-9d83-4c2f-8eba-d6db484f32c8
393+
version: 1
394+
release_date: 2024-12-13T00:00:00Z
395+
update_reason:
396+
type: ARTIFACT_UPDATED
397+
comment: VDR file updated
398+
artifacts:
399+
- uuid: 1cb47b95-8bf8-3bad-a5a4-0d54d86e10ce
400+
name: Build SBOM
401+
type: bom
402+
formats:
403+
- mime_type: application/vnd.cyclonedx+xml
404+
description: CycloneDX SBOM (XML)
405+
url: https://repo.maven.apache.org/maven2/org/apache/logging/log4j/log4j-core/2.24.3/log4j-core-2.24.3-cyclonedx.xml
406+
signature_url: https://repo.maven.apache.org/maven2/org/apache/logging/log4j/log4j-core/2.24.3/log4j-core-2.24.3-cyclonedx.xml.asc
407+
checksums:
408+
- algType: MD5
409+
algValue: 2e1a525afc81b0a8ecff114b8b743de9
410+
- algType: SHA-1
411+
algValue: 5a7d4caef63c5c5ccdf07c39337323529eb5a770
412+
- uuid: dfa35519-9734-4259-bba1-3e825cf4be06
413+
name: Vulnerability Disclosure Report
414+
type: vulnerability-assertion
415+
formats:
416+
- mime_type: application/vnd.cyclonedx+xml
417+
description: CycloneDX VDR (XML)
418+
url: https://logging.apache.org/cyclonedx/vdr.xml
419+
checksums:
420+
- algType: SHA-256
421+
algValue: 75b81020b3917cb682b1a7605ade431e062f7a4c01a412f0b87543b6e995ad2a
422+
390423
collection-update-reason:
391424
type: object
392425
description: Reason for the update to the TEA collection

tea-collection/tea-collection.md

Lines changed: 57 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -101,3 +101,60 @@ The TEA Artifact object has the following parts:
101101

102102
Updates of VEX (CSAF) files may be handled in a different way by a TEA client,
103103
producing different alerts than other changes of a collection.
104+
105+
### Examples
106+
107+
```json
108+
{
109+
"uuid": "4c72fe22-9d83-4c2f-8eba-d6db484f32c8",
110+
"version": 1,
111+
"release_date": "2024-12-13T00:00:00Z",
112+
"update_reason": {
113+
"type": "ARTIFACT_UPDATED",
114+
"comment": "VDR file updated"
115+
},
116+
"artifacts": [
117+
{
118+
"uuid": "1cb47b95-8bf8-3bad-a5a4-0d54d86e10ce",
119+
"name": "Build SBOM",
120+
"type": "bom",
121+
"formats": [
122+
{
123+
"mime_type": "application/vnd.cyclonedx+xml",
124+
"description": "CycloneDX SBOM (XML)",
125+
"url": "https://repo.maven.apache.org/maven2/org/apache/logging/log4j/log4j-core/2.24.3/log4j-core-2.24.3-cyclonedx.xml",
126+
"signature_url": "https://repo.maven.apache.org/maven2/org/apache/logging/log4j/log4j-core/2.24.3/log4j-core-2.24.3-cyclonedx.xml.asc",
127+
"checksums": [
128+
{
129+
"algType": "MD5",
130+
"algValue": "2e1a525afc81b0a8ecff114b8b743de9"
131+
},
132+
{
133+
"algType": "SHA-1",
134+
"algValue": "5a7d4caef63c5c5ccdf07c39337323529eb5a770"
135+
}
136+
]
137+
}
138+
]
139+
},
140+
{
141+
"uuid": "dfa35519-9734-4259-bba1-3e825cf4be06",
142+
"name": "Vulnerability Disclosure Report",
143+
"type": "vulnerability-assertion",
144+
"formats": [
145+
{
146+
"mime_type": "application/vnd.cyclonedx+xml",
147+
"description": "CycloneDX VDR (XML)",
148+
"url": "https://logging.apache.org/cyclonedx/vdr.xml",
149+
"checksums": [
150+
{
151+
"algType": "SHA-256",
152+
"algValue": "75b81020b3917cb682b1a7605ade431e062f7a4c01a412f0b87543b6e995ad2a"
153+
}
154+
]
155+
}
156+
]
157+
}
158+
]
159+
}
160+
```

0 commit comments

Comments
 (0)