forked from oasis-tcs/csaf
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- addresses parts of oasis-tcs#803 - update referenced SSVC schema to reflect change from CERTCC/SSVC#654 - reformat JSON schema
- Loading branch information
1 parent
a38b394
commit 789785c
Showing
1 changed file
with
109 additions
and
93 deletions.
There are no files selected for viewing
202 changes: 109 additions & 93 deletions
202
csaf_2.1/referenced_schema/certcc/Decision_Point_Value_Selection-1-0-1.schema.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,98 +1,114 @@ | ||
| { | ||
| "$schema": "https://json-schema.org/draft/2020-12/schema", | ||
| "$id": "https://certcc.github.io/SSVC/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json", | ||
| "definitions": { | ||
| "id": { | ||
| "type": "string", | ||
| "description": "Identifier for a vulnerability could be CVE, CERT/CC VU#, OSV id, Bugtraq, GHSA etc.", | ||
| "examples": ["CVE-2024-101010","VU#11111","GHSA-11a1-22b2-33c3"] | ||
| }, | ||
| "role": { | ||
| "type": "string", | ||
| "description": "Roles to define SSVC Stakeholders https://certcc.github.io/SSVC/topics/enumerating_stakeholders/", | ||
| "examples": ["Supplier","Deployer","Coordinator"] | ||
| "$schema": "https://json-schema.org/draft/2020-12/schema", | ||
| "$id": "https://certcc.github.io/SSVC/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json", | ||
| "$defs": { | ||
| "id": { | ||
| "type": "string", | ||
| "description": "Identifier for a vulnerability could be CVE, CERT/CC VU#, OSV id, Bugtraq, GHSA etc.", | ||
| "examples": [ | ||
| "CVE-2024-101010", | ||
| "VU#11111", | ||
| "GHSA-11a1-22b2-33c3" | ||
| ] | ||
| }, | ||
| "role": { | ||
| "type": "string", | ||
| "description": "Roles to define SSVC Stakeholders https://certcc.github.io/SSVC/topics/enumerating_stakeholders/", | ||
| "examples": [ | ||
| "Supplier", | ||
| "Deployer", | ||
| "Coordinator" | ||
| ] | ||
| }, | ||
| "timestamp": { | ||
| "description": "Date and time in ISO format ISO 8601 format", | ||
| "type": "string", | ||
| "format": "date-time" | ||
| }, | ||
| "schemaVersion": { | ||
| "description": "Schema version used to represent this evaluation", | ||
| "type": "string", | ||
| "enum": [ | ||
| "1-0-1" | ||
| ] | ||
| }, | ||
| "SsvcdecisionpointselectionSchema": { | ||
| "description": "A down-selection of SSVC Decision Points that represent an evaluation at a specific time of a Vulnerability", | ||
| "properties": { | ||
| "name": { | ||
| "description": "Name of the Decision Point that were evaluated", | ||
| "title": "name", | ||
| "type": "string", | ||
| "examples": [ | ||
| "Automatable", | ||
| "Exploitation" | ||
| ] | ||
| }, | ||
| "timestamp" : { | ||
| "description": "Date and time in ISO format ISO 8601 format", | ||
| "type": "string", | ||
| "format": "date-time" | ||
| }, | ||
| "schemaVersion": { | ||
| "description": "Schema version used to represent this evaluation", | ||
| "type": "string", | ||
| "enum": ["1-0-1"] | ||
| "namespace": { | ||
| "description": "SSVC Namespace that were used for defining the evaluated Decision Points", | ||
| "title": "namespace", | ||
| "type": "string", | ||
| "examples": [ | ||
| "ssvc", | ||
| "cvvsv4" | ||
| ] | ||
| }, | ||
| "SsvcdecisionpointselectionSchema": { | ||
| "description": "A down-selection of SSVC Decision Points that represent an evaluation at a specific time of a Vulnerability", | ||
| "properties": { | ||
| "name": { | ||
| "description": "Name of the Decision Point that were evaluated", | ||
| "title": "name", | ||
| "type": "string", | ||
| "examples": ["Automatable", "Exploitation"] | ||
| }, | ||
| "namespace": { | ||
| "description": "SSVC Namespace that were used for defining the evaluated Decision Points", | ||
| "title": "namespace", | ||
| "type": "string", | ||
| "examples": ["ssvc","cvvsv4"] | ||
| }, | ||
| "values": { | ||
| "description": "Evaluated values of the Decision Point", | ||
| "title": "values", | ||
| "type": "array", | ||
| "minItems": 1, | ||
| "items": { | ||
| "description": "Each value that were down-selected for a Decision Point", | ||
| "title": "values", | ||
| "type": "string" | ||
| } | ||
| }, | ||
| "version": { | ||
| "description": "Version of the Decision Points that were evaluated", | ||
| "title": "version", | ||
| "type": "string" | ||
| } | ||
| }, | ||
| "type": "object", | ||
| "required": [ | ||
| "name", | ||
| "namespace", | ||
| "values", | ||
| "version" | ||
| ], | ||
| "additionalProperties": false | ||
| } | ||
| "values": { | ||
| "description": "Evaluated values of the Decision Point", | ||
| "title": "values", | ||
| "type": "array", | ||
| "minItems": 1, | ||
| "items": { | ||
| "description": "Each value that were down-selected for a Decision Point", | ||
| "title": "values", | ||
| "type": "string" | ||
| } | ||
| }, | ||
| "version": { | ||
| "description": "Version of the Decision Points that were evaluated", | ||
| "title": "version", | ||
| "type": "string" | ||
| } | ||
| }, | ||
| "type": "object", | ||
| "required": [ | ||
| "name", | ||
| "namespace", | ||
| "values", | ||
| "version" | ||
| ], | ||
| "additionalProperties": false | ||
| } | ||
| }, | ||
| "properties": { | ||
| "id": { | ||
| "$ref": "#/$defs/id" | ||
| }, | ||
| "role": { | ||
| "$ref": "#/$defs/role" | ||
| }, | ||
| "schemaVersion": { | ||
| "$ref": "#/$defs/schemaVersion" | ||
| }, | ||
| "timestamp": { | ||
| "$ref": "#/$defs/timestamp" | ||
| }, | ||
| "properties": { | ||
| "id": { | ||
| "$ref": "#/definitions/id" | ||
| }, | ||
| "role": { | ||
| "$ref": "#/definitions/role" | ||
| }, | ||
| "schemaVersion": { | ||
| "$ref": "#/definitions/schemaVersion" | ||
| }, | ||
| "timestamp": { | ||
| "$ref": "#/definitions/timestamp" | ||
| }, | ||
| "selections": { | ||
| "description" : "An array of Decision Points and their Values that were down-selected or evaluated ", | ||
| "title": "selections", | ||
| "type": "array", | ||
| "minItems": 1, | ||
| "items": { | ||
| "$ref": "#/definitions/SsvcdecisionpointselectionSchema" | ||
| } | ||
| } | ||
| }, | ||
| "type": "object", | ||
| "required": [ | ||
| "selections", | ||
| "id", | ||
| "timestamp", | ||
| "schemaVersion" | ||
| ], | ||
| "additionalProperties": false | ||
| "selections": { | ||
| "description": "An array of Decision Points and their Values that were down-selected or evaluated ", | ||
| "title": "selections", | ||
| "type": "array", | ||
| "minItems": 1, | ||
| "items": { | ||
| "$ref": "#/$defs/SsvcdecisionpointselectionSchema" | ||
| } | ||
| } | ||
| }, | ||
| "type": "object", | ||
| "required": [ | ||
| "selections", | ||
| "id", | ||
| "timestamp", | ||
| "schemaVersion" | ||
| ], | ||
| "additionalProperties": false | ||
| } |