specification
specification copied to clipboard
BC: `proofOfConcept.reproductionSteps` should be array reuse `step` object
Within the "vulnerabilities" a new v1.5 field "proofOfConcept` object was added with a field "reproductionSteps" which is a single string; it should be an array by implied name; however, it would be better to adopt the "formulation" concept of (set of tasks) "step" which itself is an object which can provide detailed information around each step and (any) commands used:
"step": {
"type": "object",
"description": "Executes specific commands or tools in order to accomplish its owning task as part of a sequence.",
"additionalProperties": false,
"properties": {
"name": {
"title": "Name",
"description": "A name for the step.",
"type": "string"
},
"description": {
"title": "Description",
"description": "A description of the step.",
"type": "string"
},
"commands": {
"title": "Commands",
"description": "Ordered list of commands or directives for the step",
"type": "array",
"items": {
"$ref": "#/definitions/command"
}
},
"properties": {
"type": "array",
"title": "Properties",
"items": {
"$ref": "#/definitions/property"
}
}
}
},