{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/fortify/main/json-schema/fortify-vulnerability-list-response-schema.json",
  "title": "VulnerabilityListResponse",
  "description": "Paginated list of vulnerabilities",
  "x-generated": "2026-10-03",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/fortify-vulnerabilities-api-openapi.yml#/components/schemas/VulnerabilityListResponse",
  "type": "object",
  "properties": {
    "items": {
      "type": "array",
      "items": {
        "$ref": "#/$defs/Vulnerability"
      }
    },
    "totalCount": {
      "type": "integer",
      "format": "int32",
      "description": "Total number of vulnerabilities matching the query"
    }
  },
  "$defs": {
    "Vulnerability": {
      "type": "object",
      "description": "Represents a vulnerability finding",
      "properties": {
        "vulnId": {
          "type": "integer",
          "format": "int32",
          "description": "Unique identifier of the vulnerability"
        },
        "releaseId": {
          "type": "integer",
          "format": "int32",
          "description": "Identifier of the associated release"
        },
        "category": {
          "type": "string",
          "description": "Vulnerability category"
        },
        "kingdom": {
          "type": "string",
          "description": "Vulnerability kingdom classification"
        },
        "severity": {
          "type": "integer",
          "format": "int32",
          "description": "Severity level (1-4, where 4 is critical)"
        },
        "severityString": {
          "type": "string",
          "description": "Human-readable severity string"
        },
        "assignedUser": {
          "type": "string",
          "description": "User assigned to the vulnerability"
        },
        "isSuppressed": {
          "type": "boolean",
          "description": "Whether the vulnerability is suppressed"
        },
        "hasComments": {
          "type": "boolean",
          "description": "Whether the vulnerability has comments"
        },
        "status": {
          "type": "string",
          "description": "Current audit status"
        },
        "scanType": {
          "type": "string",
          "description": "Type of scan that found the vulnerability"
        },
        "primaryLocation": {
          "type": "string",
          "description": "Primary source location of the vulnerability"
        },
        "lineNumber": {
          "type": "integer",
          "format": "int32",
          "description": "Line number of the vulnerability"
        },
        "introducedDate": {
          "type": "string",
          "format": "date-time",
          "description": "Date when the vulnerability was first found"
        },
        "removedDate": {
          "type": "string",
          "format": "date-time",
          "description": "Date when the vulnerability was resolved"
        }
      }
    }
  }
}