Tod Beardsley
Tod Beardsley
Thanks to Jono, I found the documentation on this SSVC decision point: https://github.com/CERTCC/SSVC/blob/bb9ca7bac128d89e211756c239781aa4c2f284fb/docs/reference/decision_points/value_density.md Yay, so now I know what it means. I'd still like to keep the issue open, though,...
Thanks @jgamblin ! ACK'ed. I suspect there's some upstream pollution, but we'll check it out.
In general, we should have fixed all the errant dashes-instead-of-stars, but there are a few (like the one @patrickmgarrity pointed out) that are actually in the NVD dictionary, and we're...
Thanks so much, @prabhu!
@serkanozkanssc would you mind opening this as a separate issue?
Actually, having talked about this, I think we need a strategy for a) picking between close but ambiguous CPEs (lol that those exist) and b) taking feedback on evidence-based reasoning...
Just a suggestion -- basically, "however you normally take and process data sets from a GitHub repo, just do that." This is a temporary consumer situation, though, as the README...
I don't think there's anything to do here right now -- once ADP is fired up and going, we can update the README to talk more about ADP, but that's...
I believe this is resolved per @jwoytek-cisa's comment above, at least for going forward. There are a few ways to do this correctly, so we'll have to weigh the value...