Occurrences

Keeping track of assumptions being made, discussions being had.

Vulnerabilities

Assumptions to make the UI function correctly

• Only vulnerability scans will produce discovery occurrences. Not true anymore, but the mapping has not been updated to handle otherwise.
• Each vulnerability reported will only have one packageIssue.
• Severity shown in the UI is based off of effectiveSeverity; currently nothing is being done with severity because none of the test occurrences I have use the severity property.
• effectiveSeverity must be one of the following: LOW, MEDIUM, HIGH, CRITICAL, or SEVERITY_UNSPECIFIED.