fix: vex generatation and parse test (#4287)

intel · Jul 29, 2024 · 7d7be28 · 7d7be28
1 parent 353cc4d
commit 7d7be28
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 12 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -9,7 +9,7 @@ importlib_metadata>=3.6; python_version < "3.10"
 importlib_resources; python_version < "3.9"
 jinja2>=2.11.3
 jsonschema>=3.0.2
-lib4sbom>=0.7.0
+lib4sbom>=0.7.2
 lib4vex>=0.1.0
 python-gnupg
 packageurl-python

diff --git a/test/test_vex.py b/test/test_vex.py
@@ -208,7 +208,7 @@ class TestVexParse:
             "CVE-1234-1005": {
                 "remarks": Remarks.NotAffected,
                 "comments": "",
-                "response": [],
+                "response": "will_not_fix",
                 "justification": "code_not_reachable",
             },
             "paths": {},

diff --git a/test/vex/test_cyclonedx_vex.json b/test/vex/test_cyclonedx_vex.json
@@ -44,10 +44,7 @@
       },
       "affects": [
         {
-          "ref": "urn:cbt:1/vendor0#product0:1.0",
-          "versions": {
-            "status": "unknown"
-          }
+          "ref": "urn:cbt:1/vendor0#product0:1.0"
         }
       ]
     },
@@ -63,13 +60,17 @@
       "updated": "2024-06-14T22:39:24Z",
       "analysis": {
         "state": "not_affected",
-        "detail": "Detail field populated.",
-        "justification": "code_not_reachable"
+        "detail": "NotAffected: Detail field populated.",
+        "justification": "code_not_reachable",
+        "response": [
+          "will_not_fix"
+        ]
       },
       "affects": [
         {
           "ref": "urn:cbt:1/vendor0#product0:1.0",
           "versions": {
+            "version": "1.0",
             "status": "unaffected"
           }
         }
@@ -93,6 +94,7 @@
         {
           "ref": "urn:cbt:1/vendor0#product0:2.8.6",
           "versions": {
+            "version": "2.8.6",
             "status": "affected"
           }
         }
@@ -114,10 +116,7 @@
       },
       "affects": [
         {
-          "ref": "urn:cbt:1/vendor0#product0:2.8.6",
-          "versions": {
-            "status": "unknown"
-          }
+          "ref": "urn:cbt:1/vendor0#product0:2.8.6"
         }
       ]
     }