action anchore_get_image_vulnerabilities_by_type {
  label: "Get vulnerabilities by type"
  provider: anchore
  method: GET
  path: "/images/{imageDigest}/vuln/{vtype}"
  encoding: json
  input: {
    type: "object"
    properties: {
      force_refresh: {
        type: "boolean"
      }
      imageDigest: {
        type: "string"
      }
      vendor_only: {
        type: "boolean"
      }
      vtype: {
        type: "string"
      }
      "x-anchore-account": {
        type: "string"
      }
    }
    required: ["imageDigest", "vtype"]
    additionalProperties: false
  }
  output: {
    type: "object"
    description: "envelope containing list of vulnerabilities"
    properties: {
      imageDigest: {
        type: "string"
      }
      vulnerabilities: {
        type: "array"
        description: "List of Vulnerability objects"
        items: {
          type: "object"
          properties: {
            feed: {
              type: "string"
              description: "The name of the feed where vulnerability match was made"
            }
            feed_group: {
              type: "string"
              description: "The name of the feed group where vulnerability match was made"
            }
            fix: {
              type: "string"
              description: "The package containing a fix, if available"
            }
            nvd_data: {
              type: "array"
              description: "List of Nvd Data objects"
              items: {
                type: "object"
                properties: {
                  cvss_v2: {
                    type: "object"
                    properties: {
                      base_score: {
                        type: "number"
                      }
                      exploitability_score: {
                        type: "number"
                      }
                      impact_score: {
                        type: "number"
                      }
                    }
                  }
                  cvss_v3: {
                    type: "object"
                    properties: {
                      base_score: {
                        type: "number"
                      }
                      exploitability_score: {
                        type: "number"
                      }
                      impact_score: {
                        type: "number"
                      }
                    }
                  }
                  id: {
                    type: "string"
                    description: "NVD Vulnerability ID"
                  }
                }
              }
            }
            package: {
              type: "string"
              description: "The package name and version that are vulnerable in the image"
            }
            package_cpe: {
              type: "string"
              description: "The CPE string (if applicable) describing the package to vulnerability match"
            }
            package_name: {
              type: "string"
              description: "The name of the vulnerable package artifact"
            }
            package_path: {
              type: "string"
              description: "The location (if applicable) of the vulnerable package in the container filesystem"
            }
            package_type: {
              type: "string"
              description: "The type of vulnerable package"
            }
            package_version: {
              type: "string"
              description: "The version of the vulnerable package artifact"
            }
            severity: {
              type: "string"
              description: "The severity of the vulnerability"
            }
            url: {
              type: "string"
              description: "The url for more information about the vulnerability"
            }
            vendor_data: {
              type: "array"
              description: "List of Vendor Data objects"
              items: {
                type: "object"
                properties: {
                  cvss_v2: {
                    type: "object"
                    properties: {
                      base_score: {
                        type: "number"
                      }
                      exploitability_score: {
                        type: "number"
                      }
                      impact_score: {
                        type: "number"
                      }
                    }
                  }
                  cvss_v3: {
                    type: "object"
                    properties: {
                      base_score: {
                        type: "number"
                      }
                      exploitability_score: {
                        type: "number"
                      }
                      impact_score: {
                        type: "number"
                      }
                    }
                  }
                  id: {
                    type: "string"
                    description: "Vendor Vulnerability ID"
                  }
                }
              }
            }
            vuln: {
              type: "string"
              description: "The vulnerability identifier, such as CVE-2017-100, or RHSA-2017123"
            }
            will_not_fix: {
              type: "boolean"
              description: "Whether a vendor will fix or not fix the vulnerability"
            }
          }
        }
      }
      vulnerability_type: {
        type: "string"
      }
    }
  }
}