Send severity data along with vulnerability in bulk api

[sbs2001]

Fix#351
Signed-off-by: Shivam Sandbhor shivam.sandbhor@gmail.com

[pombredanne]

Thanks!
See the proposed changes below for your consideration.

[sbs2001]

For the POST request to /api/packages/bulk_search with the body as

{
"purls": [
"pkg:deb/debian/doesnotexist@0.9.7-10?distro=jessie",
"pkg:maven/com.datadoghq/datadog-api-client@1.0.0-beta.7",
]
}

The response looks like :

[
{
"name": "doesnotexist",
"namespace": "debian",
"qualifiers": {"distro": "jessie"},
"resolved_vulnerabilities": [],
"subpath": None,
"type": "deb",
"unresolved_vulnerabilities": [],
"version": "0.9.7-10",
},
{
"name": "datadog-api-client",
"namespace": "com.datadoghq",
"purl": "pkg:maven/com.datadoghq/datadog-api-client@1.0.0-beta.7",
"qualifiers": {},
"resolved_vulnerabilities": [],
"subpath": "",
"type": "maven",
"version": "1.0.0-beta.7",
"url": "http://testserver/api/packages/3467",
"unresolved_vulnerabilities": [
{
"references": [
{
"reference_id": "",
"scores": [],
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21331",
},
{
"reference_id": "GHSA-2cxf-6567-7pp6",
"scores": [{"scoring_system": "cvssv3.1_qr", "value": "LOW"}],
"url": "https://github.com/DataDog/datadog-api-client-java/security/advisories/GHSA-2cxf-6567-7pp6",
},
{
"reference_id": "GHSA-2cxf-6567-7pp6",
"scores": [],
"url": "https://github.com/advisories/GHSA-2cxf-6567-7pp6",
},
],
"url": "http://testserver/api/vulnerabilities/60",
"vulnerability_id": "CVE-2021-21331",
}
],
},
]

[pombredanne]

@sbs2001 can we add the comment above to the doc?

[sbs2001]

@pombredanne that's already done via d8ce30e