pbom.json

{
  "token_id": "pbom123",
  "timestamp": "2023-11-01T12:30:00Z",
  "package": {
    "package_id": "pkg789",
    "package_name": "example_app"
  },
  "pull_requests": [
    {
      "id": "pr456",
      "timestamp": "2023-11-01T14:45:00Z",
      "status": "approved",
      "developers": ["dev1", "dev2"],
      "approver": "approver1",
      "vulnerabilities": [
        {
          "vulnerability_id": "vuln123",
          "name": "SQL Injection",
          "severity": "high",
          "fix_status": "unresolved"
        }
      ]
    },
    {
      "id": "pr457",
      "timestamp": "2023-11-02T09:15:00Z",
      "status": "merged",
      "developers": ["dev3", "dev4"],
      "approver": "approver2",
      "vulnerabilities": [
        {
          "vulnerability_id": "vuln124",
          "name": "Cross-Site Scripting (XSS)",
          "severity": "medium",
          "fix_status": "fixed"
        },
        {
          "vulnerability_id": "vuln125",
          "name": "Insecure Dependency",
          "severity": "low",
          "fix_status": "fixed"
        }
      ]
    }
  ]
}