SSVC icon indicating copy to clipboard operation
SSVC copied to clipboard

Some decision points missing in data/json/ folder

Open sei-vsarvepalli opened this issue 8 months ago • 2 comments

Describe the bug This may be resolved by automatic generation of decision points json as well as the outcome groups json from #739 , but at this time the following decision points are not in the data/json folder

  1. critical_software_1_0_0.json => namespace ssvc
  2. subsequent_confidentiality_impact_1_0_0.json => namespace cvss
  3. subsequent_integrity_impact_1_0_0.json => namespace cvss

To Reproduce View data/json files.

Expected behavior All decisions points known and well-defined should also be available in json format.

sei-vsarvepalli avatar Mar 20 '25 21:03 sei-vsarvepalli

related the file data/json/decision_points/cvss/availability_impact_2_0_1.json should actually be data/json/decision_points/cvss/availability_impact_3_0_0.json according to the code in https://github.com/CERTCC/SSVC/blob/8887a136b7f7f6c5f6862a1f3dbbb7ecf1ba50a8/src/ssvc/decision_points/cvss/availability_impact.py#L117-L134

sei-vsarvepalli avatar Mar 20 '25 22:03 sei-vsarvepalli

Same with data/json/decision_points/cvss/confidentiality_impact_2_0_1.json should be data/json/decision_points/cvss/confidentiality_impact_3_0_0.json according to https://github.com/CERTCC/SSVC/blob/8887a136b7f7f6c5f6862a1f3dbbb7ecf1ba50a8/src/ssvc/decision_points/cvss/confidentiality_impact.py#L125-L145

Same with data/json/decision_points/cvss/integrity_impact_2_0_1.json should be data/json/decision_points/cvss/integrity_impact_3_0_0.json according to https://github.com/CERTCC/SSVC/blob/8887a136b7f7f6c5f6862a1f3dbbb7ecf1ba50a8/src/ssvc/decision_points/cvss/integrity_impact.py#L116-L129

sei-vsarvepalli avatar Mar 20 '25 22:03 sei-vsarvepalli