Merge pull request #434 from puerco/vulnsv02-proto

VulnsV2: Add missing invocation to protos and spec

Author: pxp928

protos/in_toto_attestation/predicates/vulns/v0.2/vulns.proto

@@ -11,13 +11,13 @@ option java_package = "io.github.intoto.attestation.predicates.vulns.v02";
 // Validation of all fields is left to the users of this proto.
 message Vulns {
   Scanner scanner = 1;
-  ScanMetadata scan_metadata = 2;
+  ScanMetadata metadata = 2;
 }
 
 message Scanner {
   string uri = 1;
   optional string version = 2;
-  VulnDatabase database = 3;
+  VulnDatabase db = 3;
   repeated Result result = 4;
 }
 

spec/predicates/vulns_02.md

@@ -129,7 +129,7 @@ The `predicate` contains a JSON-encoded data with the following fields:
          "id": "CVE-123",
          "severity": [
           { "method": "nvd", "score": "medium"},
-          { "method": "cvss_score", "score", "5.2" }
+          { "method": "cvss_score", "score": "5.2" }
          ]
         },
         {...}