Nate

@radeksimko could @slobo have some guidance on this one? please :pray:

@mxab can you rebase this? @knqyf263 is there any reason why this stalled thanks :)

@nolar can you cut a release containing the above MR ^ thanks :)

@syalioune do you have an example of the altered VEX? I'm adding a bom-ref to the vulnerability and updating the affects ref to match the project however the vuln is...

@syalioune your above example does not work for me either, are you sure the affects.ref is supposed to be the project UUID, I thought that it should be the UUID...