Tidelift — package vulnerability check

arazzo: 1.0.1
info:
  title: Tidelift — package vulnerability check
  version: 1.0.0
  summary: Validate the API key, look up a package and a release, and pull the release's vulnerabilities.
sourceDescriptions:
- name: tidelift
  url: ../openapi/tidelift-subscriber-api-openapi-original.json
  type: openapi
workflows:
- workflowId: packageVulnerabilityCheck
  summary: Look up a package release and inspect a vulnerability affecting it.
  inputs:
    type: object
    properties:
      package_platform: { type: string }
      package_name: { type: string }
      release_version: { type: string }
      vulnerability_id: { type: string }
    required: [package_platform, package_name, release_version]
  steps:
  - stepId: auth
    operationId: authCheck
  - stepId: showPackage
    operationId: showPackage
    parameters:
    - name: package_platform
      in: path
      value: $inputs.package_platform
    - name: package_name
      in: path
      value: $inputs.package_name
  - stepId: showRelease
    operationId: showRelease
    parameters:
    - name: package_platform
      in: path
      value: $inputs.package_platform
    - name: package_name
      in: path
      value: $inputs.package_name
    - name: release_version
      in: path
      value: $inputs.release_version
  - stepId: releaseSbom
    operationId: releaseSbom
    parameters:
    - name: package_platform
      in: path
      value: $inputs.package_platform
    - name: package_name
      in: path
      value: $inputs.package_name
    - name: release_version
      in: path
      value: $inputs.release_version
  - stepId: getVulnerability
    operationId: getVulnerability
    parameters:
    - name: vulnerability_id
      in: path
      value: $inputs.vulnerability_id