forked from oasis-tcs/csaf
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- addresses parts of oasis-tcs#803 - add SSVC decision point value selection 1.0.1 to schema - add SSVC decision point value selection 1.0.1 file into referenced schemas - adapt test scripts
- Loading branch information
1 parent
6dcea01
commit 68e5ca0
Showing
5 changed files
with
107 additions
and
3 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
98 changes: 98 additions & 0 deletions
98
csaf_2.1/referenced_schema/certcc/Decision_Point_Value_Selection-1-0-1.schema.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,98 @@ | ||
| { | ||
| "$schema": "https://json-schema.org/draft/2020-12/schema", | ||
| "$id": "https://certcc.github.io/SSVC/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json", | ||
| "definitions": { | ||
| "id": { | ||
| "type": "string", | ||
| "description": "Identifier for a vulnerability could be CVE, CERT/CC VU#, OSV id, Bugtraq, GHSA etc.", | ||
| "examples": ["CVE-2024-101010","VU#11111","GHSA-11a1-22b2-33c3"] | ||
| }, | ||
| "role": { | ||
| "type": "string", | ||
| "description": "Roles to define SSVC Stakeholders https://certcc.github.io/SSVC/topics/enumerating_stakeholders/", | ||
| "examples": ["Supplier","Deployer","Coordinator"] | ||
| }, | ||
| "timestamp" : { | ||
| "description": "Date and time in ISO format ISO 8601 format", | ||
| "type": "string", | ||
| "format": "date-time" | ||
| }, | ||
| "schemaVersion": { | ||
| "description": "Schema version used to represent this evaluation", | ||
| "type": "string", | ||
| "enum": ["1-0-1"] | ||
| }, | ||
| "SsvcdecisionpointselectionSchema": { | ||
| "description": "A down-selection of SSVC Decision Points that represent an evaluation at a specific time of a Vulnerability", | ||
| "properties": { | ||
| "name": { | ||
| "description": "Name of the Decision Point that were evaluated", | ||
| "title": "name", | ||
| "type": "string", | ||
| "examples": ["Automatable", "Exploitation"] | ||
| }, | ||
| "namespace": { | ||
| "description": "SSVC Namespace that were used for defining the evaluated Decision Points", | ||
| "title": "namespace", | ||
| "type": "string", | ||
| "examples": ["ssvc","cvvsv4"] | ||
| }, | ||
| "values": { | ||
| "description": "Evaluated values of the Decision Point", | ||
| "title": "values", | ||
| "type": "array", | ||
| "minItems": 1, | ||
| "items": { | ||
| "description": "Each value that were down-selected for a Decision Point", | ||
| "title": "values", | ||
| "type": "string" | ||
| } | ||
| }, | ||
| "version": { | ||
| "description": "Version of the Decision Points that were evaluated", | ||
| "title": "version", | ||
| "type": "string" | ||
| } | ||
| }, | ||
| "type": "object", | ||
| "required": [ | ||
| "name", | ||
| "namespace", | ||
| "values", | ||
| "version" | ||
| ], | ||
| "additionalProperties": false | ||
| } | ||
| }, | ||
| "properties": { | ||
| "id": { | ||
| "$ref": "#/definitions/id" | ||
| }, | ||
| "role": { | ||
| "$ref": "#/definitions/role" | ||
| }, | ||
| "schemaVersion": { | ||
| "$ref": "#/definitions/schemaVersion" | ||
| }, | ||
| "timestamp": { | ||
| "$ref": "#/definitions/timestamp" | ||
| }, | ||
| "selections": { | ||
| "description" : "An array of Decision Points and their Values that were down-selected or evaluated ", | ||
| "title": "selections", | ||
| "type": "array", | ||
| "minItems": 1, | ||
| "items": { | ||
| "$ref": "#/definitions/SsvcdecisionpointselectionSchema" | ||
| } | ||
| } | ||
| }, | ||
| "type": "object", | ||
| "required": [ | ||
| "selections", | ||
| "id", | ||
| "timestamp", | ||
| "schemaVersion" | ||
| ], | ||
| "additionalProperties": false | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters