{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://tech-log-frontend.local/schemas/supply-chain-verification.schema.json",
  "additionalProperties": false,
  "properties": {
    "dependencyDiff": {
      "additionalProperties": false,
      "properties": {
        "added": {
          "items": {
            "minLength": 1,
            "type": "string"
          },
          "type": "array"
        },
        "changed": {
          "items": {
            "minLength": 1,
            "type": "string"
          },
          "type": "array"
        },
        "removed": {
          "items": {
            "minLength": 1,
            "type": "string"
          },
          "type": "array"
        },
        "upgrades": {
          "items": {
            "additionalProperties": false,
            "properties": {
              "from": {
                "minLength": 1,
                "type": "string"
              },
              "name": {
                "minLength": 1,
                "type": "string"
              },
              "to": {
                "minLength": 1,
                "type": "string"
              }
            },
            "required": [
              "name",
              "from",
              "to"
            ],
            "type": "object"
          },
          "type": "array"
        }
      },
      "required": [
        "added",
        "removed",
        "changed",
        "upgrades"
      ],
      "type": "object"
    },
    "distSha256": {
      "pattern": "^[a-f0-9]{64}$",
      "type": "string"
    },
    "failures": {
      "items": {
        "type": "string"
      },
      "type": "array"
    },
    "highRiskReview": {
      "items": {
        "minLength": 1,
        "type": "string"
      },
      "type": "array"
    },
    "localStatus": {
      "enum": [
        "PASS",
        "FAIL"
      ],
      "type": "string"
    },
    "lockfileSha256": {
      "pattern": "^[a-f0-9]{64}$",
      "type": "string"
    },
    "promotionStatus": {
      "enum": [
        "PASS",
        "FAIL_UNVERIFIED"
      ],
      "type": "string"
    },
    "provenanceAttestationStatus": {
      "enum": [
        "PASS",
        "FAIL_UNVERIFIED"
      ],
      "type": "string"
    },
    "sbomSha256": {
      "pattern": "^[a-f0-9]{64}$",
      "type": "string"
    },
    "schemaVersion": {
      "const": 1,
      "type": "number"
    },
    "sourceSetSha256": {
      "pattern": "^[a-f0-9]{64}$",
      "type": "string"
    },
    "vulnerabilityStatus": {
      "enum": [
        "PASS",
        "FAIL",
        "FAIL_UNVERIFIED"
      ],
      "type": "string"
    }
  },
  "required": [
    "schemaVersion",
    "localStatus",
    "promotionStatus",
    "lockfileSha256",
    "sourceSetSha256",
    "distSha256",
    "sbomSha256",
    "dependencyDiff",
    "highRiskReview",
    "vulnerabilityStatus",
    "provenanceAttestationStatus",
    "failures"
  ],
  "type": "object"
}