Skip to content

Update proto docs #254

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
nscuro merged 1 commit into from
Sep 11, 2026
Merged

Update proto docs #254

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions docs/reference/notifications/notification.proto
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -124,6 +124,9 @@ message NewVulnerabilitySubject {

// The trigger of the analysis that identified the vulnerability.
AnalysisTrigger analysis_trigger = 7;

// Name of the analyzer that identified the vulnerability first.
string analyzer_identity = 8;
}

message NewVulnerableDependencySubject {
Expand Down Expand Up @@ -227,9 +230,6 @@ message Vulnerability {
// Whether the vulnerability is known to be exploited.
optional bool is_kev = 21 [json_name = "isKev"];

// Name of the analyzer that identified the vulnerability first.
optional string analyzer_identity = 22;

message Alias {
string id = 1 [json_name = "vulnId"];
string source = 2;
Expand Down
2 changes: 1 addition & 1 deletion docs/reference/notifications/schema.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -270,6 +270,7 @@ Subject for GROUP_NEW_VULNERABILITIES_SUMMARY notifications.
| `vulnerability_analysis_level` | `string` | | - |
| `affected_projects` | [`Project[]`](#org-dependencytrack-notification-v1-Project) | List of projects affected by the vulnerability. DEPRECATED: This list only holds one item, and it is identical to the one in the project field. The field is kept for backward compatibility of JSON notifications, but consumers should not expect multiple projects here. Transmitting all affected projects in one notification is not feasible for large portfolios, see https://github.com/DependencyTrack/hyades/issues/467 for details. | - |
| `analysis_trigger` | [`AnalysisTrigger`](#org-dependencytrack-notification-v1-AnalysisTrigger) | The trigger of the analysis that identified the vulnerability. | - |
| `analyzer_identity` | `string` | Name of the analyzer that identified the vulnerability first. | - |



Expand Down Expand Up @@ -968,7 +969,6 @@ Subject for GROUP_NEW_VULNERABILITIES_SUMMARY notifications.
| `cvss_v4` | `double` | | - |
| `cvss_v4_vector` | `string` | | - |
| `is_kev` | `bool` | Whether the vulnerability is known to be exploited. | - |
| `analyzer_identity` | `string` | Name of the analyzer that identified the vulnerability first. | - |



Expand Down