automation-working-group
automation-working-group copied to clipboard
Create single file with CNA/ADP information and update with CVE repository data
Right now there are two fields in a CVE record for every CNA, an "org ID" and "short name".
The only "available" data on CNAs is buried in the website repository at: https://raw.githubusercontent.com/CVEProject/cve-website/dev/src/assets/data/CNAsList.json
It does not appear to have the "org ID" field.
There was a recent addition with the following data: https://www.cve.org/cve-partner-name-map.json that includes the org ID but then only the name (not the short name) of the CNA.
I propose there is a process to generate and publish a single json file (or other data store) that contains all available and appropriate information for both the CNAs and ADPs, And that this file be included with the CVEs in the CVEListv5 repository and kept current and relevant.