in pkg/vul/convert/trivy/trivy.go [222:237]
func getBasePackageIssue(v *gabs.Container, packageType string) *g.VulnerabilityOccurrence_PackageIssue {
return &g.VulnerabilityOccurrence_PackageIssue{
PackageType: packageType,
AffectedCpeUri: makeCPE(v),
AffectedPackage: v.Search("PkgName").Data().(string),
AffectedVersion: &g.Version{
Name: v.Search("InstalledVersion").Data().(string),
Kind: g.Version_NORMAL,
},
FixedCpeUri: makeCPE(v),
FixedPackage: v.Search("PkgName").Data().(string),
FixedVersion: &g.Version{
Kind: g.Version_MAXIMUM,
},
}
}