fix(advisory): per-product component in CDX VEX - #9

Open

MarkAtwood wants to merge 5 commits into

fix/advisory-path-traversalfrom

fix/cdx-vex-per-product

Commits on Aug 13, 2026

feat(advisory): vendor canonical advisories/ tree
MarkAtwood
committed
ecf1d45
test(advisory): port gen-advisory unit suite + testdata
MarkAtwood
committed
22ef013
test(advisory): expect canonical resolvable purl for wolfSSL
MarkAtwood
committed
10362cc
fix(advisory): validate ids used in output paths
MarkAtwood
committed
cf02e17
fix(advisory): per-product component in CDX VEX
MarkAtwood
committed
3677073