{
  "version": "2.1.0",
  "$schema": "https://schemastore.azurewebsites.net/schemas/json/sarif-2.1.0.json",
  "runs": [
    {
      "tool": {
        "driver": {
          "name": "OWASP Dependency-Track",
          "fullName": "{{FULL_NAME}}",
          "version": "{{VERSION}}",
          "informationUri": "https://dependencytrack.org/",
          "rules": [
            {
              "id": "Vuln-1",
              "name": "ImproperNeutralizationOfScript-relatedHtmlTagsInAWebPage(basicXss)",
              "shortDescription": { "text": "Vuln-1" },
              "fullDescription": { "text": "This is a description" }
            },
            {
              "id": "Vuln-2",
              "name": "PathEquivalence:'filename'(trailingSpace)",
              "shortDescription": { "text": "Vuln-2" },
              "fullDescription": { "text": "Yet another description but with surrounding whitespaces" }
            },
            {
              "id": "Vuln-3",
              "name": "RelativePathTraversal",
              "shortDescription": { "text": "Vuln-3" },
              "fullDescription": { "text": "A description-with-hyphens-(and parentheses)" }
            },
            {
              "id": "Vuln-4",
              "name": "ImproperInputValidation",
              "shortDescription": { "text": "Vuln-4" },
              "fullDescription": { "text": "This is a vulnerability that has GITHUB Advisory as a source" }
            }
          ]
        }
      },
      "results": [
        {
          "ruleId": "Vuln-1",
          "message": { "text": "This is a description" },
          "locations": [
            {
              "logicalLocations": [
                { "fullyQualifiedName": "pkg:maven/org.acme/component1@1.1.4?type=jar" }
              ]
            }
          ],
          "level": "error",
          "properties": {
            "name": "Component 1",
            "group": "org.acme",
            "version": "1.1.4",
            "source": "INTERNAL",
            "cweId": "80",
            "cvssV3BaseScore": "",
            "epssScore": "",
            "epssPercentile": "",
            "severityRank": "0",
            "recommendation": ""
          }
        },
        {
          "ruleId": "Vuln-2",
          "message": { "text": "Yet another description but with surrounding whitespaces" },
          "locations": [
            {
              "logicalLocations": [
                { "fullyQualifiedName": "pkg:maven/org.acme/component1@1.1.4?type=jar" }
              ]
            }
          ],
          "level": "error",
          "properties": {
            "name": "Component 1",
            "group": "org.acme",
            "version": "1.1.4",
            "source": "INTERNAL",
            "cweId": "46",
            "cvssV3BaseScore": "",
            "epssScore": "",
            "epssPercentile": "",
            "severityRank": "1",
            "recommendation": ""
          }
        },
        {
          "ruleId": "Vuln-3",
          "message": { "text": "A description-with-hyphens-(and parentheses)" },
          "locations": [
            {
              "logicalLocations": [
                { "fullyQualifiedName": "pkg:maven/org.acme/component1@1.1.4?type=jar" }
              ]
            }
          ],
          "level": "note",
          "properties": {
            "name": "Component 1",
            "group": "org.acme",
            "version": "1.1.4",
            "source": "INTERNAL",
            "cweId": "23",
            "cvssV3BaseScore": "",
            "epssScore": "",
            "epssPercentile": "",
            "severityRank": "3",
            "recommendation": "Recommendation with whitespaces"
          }
        },
        {
          "ruleId": "Vuln-3",
          "message": { "text": "A description-with-hyphens-(and parentheses)" },
          "locations": [
            {
              "logicalLocations": [
                { "fullyQualifiedName": "pkg:maven/com.xyz/component2@2.78.123?type=jar" }
              ]
            }
          ],
          "level": "note",
          "properties": {
            "name": "Component 2",
            "group": "com.xyz",
            "version": "2.78.123",
            "source": "INTERNAL",
            "cweId": "23",
            "cvssV3BaseScore": "",
            "epssScore": "",
            "epssPercentile": "",
            "severityRank": "3",
            "recommendation": "Recommendation with whitespaces"
          }
        },
        {
          "ruleId": "Vuln-4",
          "message": { "text": "This is a vulnerability that has GITHUB Advisory as a source" },
          "locations": [
            {
              "logicalLocations": [
                { "fullyQualifiedName": "pkg:maven/com.xyz/component2@2.78.123?type=jar" }
              ]
            }
          ],
          "level": "warning",
          "properties": {
            "name": "Component 2",
            "group": "com.xyz",
            "version": "2.78.123",
            "source": "GITHUB",
            "cweId": "20",
            "cvssV3BaseScore": "",
            "epssScore": "",
            "epssPercentile": "",
            "severityRank": "2",
            "recommendation": ""
          }
        }
      ]
    }
  ]
}
