metadata-schema.yaml.schm

$schema: http://json-schema.org/draft-07/schema#
schema:
  allOf:
  - type: object
    required:
    - references
    - category
    - technology
    properties:
      references:
        type: array
        items:
        - type: string
      category:
        type: string
        enum:
        - security
        - correctness
        - best-practice
        - maintainability
        - portability
        - performance
        - accessibility
      technology:
        type: array
        items:
        - type: string
      confidence:
        type: string
        enum:
        - LOW
        - MEDIUM
        - HIGH
      likelihood:
        type: string
        enum:
        - LOW
        - MEDIUM
        - HIGH
      impact:
        type: string
        enum:
        - LOW
        - MEDIUM
        - HIGH
      subcategory:
        type: 
        - array
        items:
          type: string
          enum:
          - audit
          - vuln
          - guardrail
      cwe:
        type:
        - array
        - string
        pattern: ^CWE-\d+.*
        items:
        - type: string
          pattern: ^CWE-\d+.*
      source-rule-url:
        type: string
      asvs:
        type: object
        required:
        - section
        - control_id
        - control_url
        - version
        properties:
          section:
            type: string
          control_id:
            type: string
          control_url:
            type: string
          version:
            type: string
    if:
      properties:
        category:
          const: security
      required:
      - category
    then:
      required:
      - cwe
      - likelihood
      - impact
      - subcategory