Felder für Sicherheitsmetadaten

{
    "overview": {
        "refreshTime": "string",        // when was the data last refreshed
        "originValidated": boolean,     // is the origin of the binary validated
        "builtByAssuredOSS": boolean,   // is the binary built by Assured OSS
        "transitivelyClosed": boolean,  // are package dependencies built by Assured OSS
        "SCADataAvailable": boolean,    // is dependency information available
        "SBOMAvailable": boolean,       // is the SBOM present in SPDX-2.3 format
        "VEXAvailable": boolean,        // is the VEX Information present in CycloneDX-1.4 format
        "licenseScanned": boolean,      // is the license information present
        "fuzzTestedByGoogle": boolean   // was the package fuzz tested by Google
    },
    "buildInfo": "string",              // build details along with SPDX
    "buildInfoSignature": {
        "certInfo": {
            "cert": "string",           // certificate for verifying build info
            "certChain": "string"       // certChain for verifying build info
        },
        "digest": [
            {
                "digest": "string",     // digest of the build info
                "algorithm": "string"   // algorithm used for hashing
            }
        ],
        "signature": [
            {
                "signature": "string",  // signature of the digest
                "algorithm": "string"   // algorithm used for signing
            }
        ]
    },
    "vexInfo": "string",                // vex information along with CycloneDX
    "vexInfoSignature": {
        "certInfo": {
            "cert": "string",           // certificate for verifying vex info
            "certChain": "string"       // certChain for verifying vex info
        },
        "digest": [
            {
                "digest": "string",     // digest of the vex info
                "algorithm": "string"   // algorithm used for hashing
            }
        ],
        "signature": [
            {
                "signature": "string",  // signature of the digest
                "algorithm": "string"   // algorithm used for signing
            }
        ]
    },
    "healthInfo": "string",             // health information
    "healthInfoSignature": {
        "certInfo": {
            "cert": "string",           // certificate for verifying health info
            "certChain": "string"       // certChain for verifying health info
        },
        "digest": [
            {
                "digest":