Added a vuln event for removing and adding a scanner to an existing vulnerability

Author: patrick.rissmann@l3montree.com

internal/core/assetversion/asset_version_service.go

@@ -336,7 +336,7 @@ func buildBomRefMap(bom normalize.SBOM) map[string]cdx.Component {
 
 func (s *service) UpdateSBOM(assetVersion models.AssetVersion, scannerID string, sbom normalize.SBOM) error {
 	// load the asset components
-
+	scannerID = "Other-Scanner"
 	assetComponents, err := s.componentRepository.LoadComponents(nil, assetVersion.Name, assetVersion.AssetID, "")
 	if err != nil {
 		return errors.Wrap(err, "could not load asset components")

internal/database/models/vulnevent_model.go

@@ -26,6 +26,9 @@ const (
 	EventTypeRawRiskAssessmentUpdated VulnEventType = "rawRiskAssessmentUpdated"
 
 	EventTypeComment VulnEventType = "comment"
+
+	EventTypeAddedScanner   VulnEventType = "addedScanner"
+	EventTypeRemovedScanner VulnEventType = "removedScanner"
 )
 
 type VulnEvent struct {
@@ -211,6 +214,22 @@ func NewRawRiskAssessmentUpdatedEvent(vulnID string, userID string, justificatio
 	return event
 }
 
+func NewAddedScannerEvent(vulnID string, userID string) VulnEvent {
+	return VulnEvent{
+		Type:   EventTypeAddedScanner,
+		VulnID: vulnID,
+		UserID: userID,
+	}
+}
+
+func NewRemovedScannerEvent(vulnID string, userID string) VulnEvent {
+	return VulnEvent{
+		Type:   EventTypeRemovedScanner,
+		VulnID: vulnID,
+		UserID: userID,
+	}
+}
+
 func CheckStatusType(statusType string) error {
 	switch statusType {
 	case "fixed":
@@ -229,6 +248,10 @@ func CheckStatusType(statusType string) error {
 		return nil
 	case "markedForTransfer":
 		return nil
+	case "addedScanner":
+		return nil
+	case "removedScanner":
+		return nil
 	default:
 		return fmt.Errorf("invalid status type")
 	}