test(detector): add JVN/VulnCheck detection and enrichment unit tests

Cover the two CPE sources migrated to vuls2 whose source-specific logic the
NVD-based cases did not exercise.

Test_postConvert (inline DetectResult):
- VulnCheck exact CPE accept -> VulncheckExactVersionMatch + models.Vulncheck
  content with the console.vulncheck.com SourceLink.
- JVN exact CPE accept -> demoted to JvnVendorProductMatch, sparse models.Jvn
  content (SourceLink ""), and the JVNDB DistroAdvisory.

Test_enrich (testdata/fixtures/enrich/{vulncheck-nist-nvd2,jvn-feed-rss}):
- enrichVulnCheck fills models.Vulncheck content (CVSS/CWE/refs/SourceLink).
- enrichJVN rebuilds the rich Jvn content from the advisory, folds the sparse
  detection content's references forward (carriedRefs), and emits the JP-CERT
  alert from a jpcert.or.jp/at/ reference.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: MaineK00n

detector/vuls2/testdata/fixtures/enrich/jvn-feed-rss/data/2024/JVNDB-2024-000123.json

@@ -0,0 +1,76 @@
+{
+	"id": "JVNDB-2024-000123",
+	"advisories": [
+		{
+			"content": {
+				"id": "JVNDB-2024-000123",
+				"title": "Fortinet FortiOS におけるバッファエラーの脆弱性",
+				"description": "Fortinet が提供する FortiOS には、バッファエラー (CWE-787) の脆弱性が存在します。",
+				"severity": [
+					{
+						"type": "cvss_v31",
+						"source": "jvndb.jvn.jp",
+						"cvss_v31": {
+							"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+							"base_score": 9.8,
+							"base_severity": "CRITICAL"
+						}
+					}
+				],
+				"cwe": [
+					{
+						"source": "jvndb.jvn.jp",
+						"cwe": [
+							"CWE-787"
+						]
+					}
+				],
+				"references": [
+					{
+						"source": "jvndb.jvn.jp",
+						"url": "https://www.jpcert.or.jp/at/2024/at240008.html"
+					},
+					{
+						"source": "jvndb.jvn.jp",
+						"url": "https://jvn.jp/vu/JVNVU90001234/index.html"
+					}
+				],
+				"published": "2024-02-09T00:00:00Z",
+				"modified": "2024-02-15T00:00:00Z"
+			},
+			"segments": [
+				{
+					"ecosystem": "cpe"
+				}
+			]
+		}
+	],
+	"vulnerabilities": [
+		{
+			"content": {
+				"id": "CVE-2024-21762",
+				"references": [
+					{
+						"source": "jvndb.jvn.jp",
+						"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21762"
+					},
+					{
+						"source": "jvndb.jvn.jp",
+						"url": "https://www.cve.org/CVERecord?id=CVE-2024-21762"
+					}
+				]
+			},
+			"segments": [
+				{
+					"ecosystem": "cpe"
+				}
+			]
+		}
+	],
+	"data_source": {
+		"id": "jvn-feed-rss",
+		"raws": [
+			"fixtures/2024/JVNDB-2024-000123.json"
+		]
+	}
+}

detector/vuls2/testdata/fixtures/enrich/jvn-feed-rss/datasource.json

@@ -0,0 +1,4 @@
+{
+	"id": "jvn-feed-rss",
+	"name": "Japan Vulnerability Notes (JVN) Feed RSS"
+}

detector/vuls2/testdata/fixtures/enrich/vulncheck-nist-nvd2/data/2024/CVE-2024-3400.json

@@ -0,0 +1,53 @@
+{
+	"id": "CVE-2024-3400",
+	"vulnerabilities": [
+		{
+			"content": {
+				"id": "CVE-2024-3400",
+				"description": "A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software enables an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.",
+				"severity": [
+					{
+						"type": "cvss_v31",
+						"source": "nvd@nist.gov",
+						"cvss_v31": {
+							"vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+							"base_score": 10.0,
+							"base_severity": "CRITICAL"
+						}
+					}
+				],
+				"cwe": [
+					{
+						"source": "nvd@nist.gov",
+						"cwe": [
+							"CWE-77"
+						]
+					}
+				],
+				"references": [
+					{
+						"source": "nvd@nist.gov",
+						"url": "https://security.paloaltonetworks.com/CVE-2024-3400"
+					},
+					{
+						"source": "nvd@nist.gov",
+						"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3400"
+					}
+				],
+				"published": "2024-04-12T00:00:00Z",
+				"modified": "2024-04-19T00:00:00Z"
+			},
+			"segments": [
+				{
+					"ecosystem": "cpe"
+				}
+			]
+		}
+	],
+	"data_source": {
+		"id": "vulncheck-nist-nvd2",
+		"raws": [
+			"vuls-data-raw-vulncheck-nist-nvd2/2024/CVE-2024-3400.json"
+		]
+	}
+}

detector/vuls2/testdata/fixtures/enrich/vulncheck-nist-nvd2/datasource.json

@@ -0,0 +1,11 @@
+{
+    "id": "vulncheck-nist-nvd2",
+    "name": "VulnCheck NIST NVD2",
+    "raw": [
+        {
+            "url": "ghcr.io/vulsio/vuls-data-db:vuls-data-raw-vulncheck-nist-nvd2",
+            "commit": "0000000000000000000000000000000000000000",
+            "date": "2025-01-01T00:00:00Z"
+        }
+    ]
+}