Update Publish branch and start website update to the latest version. (#625)

ahouseholder · web-flow · commit ad8a732f7c25 · 2024-09-30T11:49:20.000-04:00
diff --git a/data/json/decision_points/automatable_2_0_0.json b/data/json/decision_points/automatable_2_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "2.0.0",
+  "schemaVersion": "1-0-1",
   "key": "A",
   "name": "Automatable",
   "description": "Can an attacker reliably automate creating exploitation events for this vulnerability?",
diff --git a/data/json/decision_points/exploitation_1_0_0.json b/data/json/decision_points/exploitation_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "E",
   "name": "Exploitation",
   "description": "The present state of exploitation of the vulnerability.",
diff --git a/data/json/decision_points/exploitation_1_1_0.json b/data/json/decision_points/exploitation_1_1_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.1.0",
+  "schemaVersion": "1-0-1",
   "key": "E",
   "name": "Exploitation",
   "description": "The present state of exploitation of the vulnerability.",
diff --git a/data/json/decision_points/human_impact_1_0_0.json b/data/json/decision_points/human_impact_1_0_0.json
@@ -1,4 +1,5 @@
 {
+  "schemaVersion": "1-0-1",
   "namespace": "ssvc",
   "version": "1.0.0",
   "key": "HI",
diff --git a/data/json/decision_points/human_impact_2_0_0.json b/data/json/decision_points/human_impact_2_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "2.0.0",
+  "schemaVersion": "1-0-1",
   "key": "HI",
   "name": "Human Impact",
   "description": "Human Impact is a combination of Safety and Mission impacts.",
diff --git a/data/json/decision_points/human_impact_2_0_1.json b/data/json/decision_points/human_impact_2_0_1.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "2.0.1",
+  "schemaVersion": "1-0-1",
   "key": "HI",
   "name": "Human Impact",
   "description": "Human Impact is a combination of Safety and Mission impacts.",
diff --git a/data/json/decision_points/mission_and_well-being_impact_1_0_0.json b/data/json/decision_points/mission_and_well-being_impact_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "MWI",
   "name": "Mission and Well-Being Impact",
   "description": "Mission and Well-Being Impact is a combination of Mission Prevalence and Public Well-Being Impact.",
diff --git a/data/json/decision_points/mission_impact_1_0_0.json b/data/json/decision_points/mission_impact_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "MI",
   "name": "Mission Impact",
   "description": "Impact on Mission Essential Functions of the Organization",
diff --git a/data/json/decision_points/mission_impact_2_0_0.json b/data/json/decision_points/mission_impact_2_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "2.0.0",
+  "schemaVersion": "1-0-1",
   "key": "MI",
   "name": "Mission Impact",
   "description": "Impact on Mission Essential Functions of the Organization",
diff --git a/data/json/decision_points/public_safety_impact_1_0_0.json b/data/json/decision_points/public_safety_impact_1_0_0.json
@@ -1,4 +1,5 @@
 {
+  "schemaVersion": "1-0-1",
   "namespace": "ssvc",
   "version": "1.0.0",
   "key": "PSI",
diff --git a/data/json/decision_points/public_safety_impact_2_0_0.json b/data/json/decision_points/public_safety_impact_2_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "2.0.0",
+  "schemaVersion": "1-0-1",
   "key": "PSI",
   "name": "Public Safety Impact",
   "description": "A coarse-grained representation of impact to public safety.",
diff --git a/data/json/decision_points/public_safety_impact_2_0_1.json b/data/json/decision_points/public_safety_impact_2_0_1.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "2.0.1",
+  "schemaVersion": "1-0-1",
   "key": "PSI",
   "name": "Public Safety Impact",
   "description": "A coarse-grained representation of impact to public safety.",
diff --git a/data/json/decision_points/public_value_added_1_0_0.json b/data/json/decision_points/public_value_added_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "PVA",
   "name": "Public Value Added",
   "description": "How much value would a publication from the coordinator benefit the broader community?",
diff --git a/data/json/decision_points/public_well-being_impact_1_0_0.json b/data/json/decision_points/public_well-being_impact_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "PWI",
   "name": "Public Well-Being Impact",
   "description": "A coarse-grained representation of impact to public well-being.",
diff --git a/data/json/decision_points/report_credibility_1_0_0.json b/data/json/decision_points/report_credibility_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "RC",
   "name": "Report Credibility",
   "description": "Is the report credible?",
diff --git a/data/json/decision_points/report_public_1_0_0.json b/data/json/decision_points/report_public_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "RP",
   "name": "Report Public",
   "description": "Is a viable report of the details of the vulnerability already publicly available?",
diff --git a/data/json/decision_points/safety_impact_1_0_0.json b/data/json/decision_points/safety_impact_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "SI",
   "name": "Safety Impact",
   "description": "The safety impact of the vulnerability.",
diff --git a/data/json/decision_points/safety_impact_2_0_0.json b/data/json/decision_points/safety_impact_2_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "2.0.0",
+  "schemaVersion": "1-0-1",
   "key": "SI",
   "name": "Safety Impact",
   "description": "The safety impact of the vulnerability. (based on IEC 61508)",
diff --git a/data/json/decision_points/supplier_cardinality_1_0_0.json b/data/json/decision_points/supplier_cardinality_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "SC",
   "name": "Supplier Cardinality",
   "description": "How many suppliers are responsible for the vulnerable component and its remediation or mitigation plan?",
diff --git a/data/json/decision_points/supplier_contacted_1_0_0.json b/data/json/decision_points/supplier_contacted_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "SC",
   "name": "Supplier Contacted",
   "description": "Has the reporter made a good-faith effort to contact the supplier of the vulnerable component using a quality contact method?",
diff --git a/data/json/decision_points/supplier_engagement_1_0_0.json b/data/json/decision_points/supplier_engagement_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "SE",
   "name": "Supplier Engagement",
   "description": "Is the supplier responding to the reporter\u2019s contact effort and actively participating in the coordination effort?",
diff --git a/data/json/decision_points/supplier_involvement_1_0_0.json b/data/json/decision_points/supplier_involvement_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "SI",
   "name": "Supplier Involvement",
   "description": "What is the state of the supplier\u2019s work on addressing the vulnerability?",
diff --git a/data/json/decision_points/system_exposure_1_0_0.json b/data/json/decision_points/system_exposure_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "EXP",
   "name": "System Exposure",
   "description": "The Accessible Attack Surface of the Affected System or Service",
diff --git a/data/json/decision_points/system_exposure_1_0_1.json b/data/json/decision_points/system_exposure_1_0_1.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.1",
+  "schemaVersion": "1-0-1",
   "key": "EXP",
   "name": "System Exposure",
   "description": "The Accessible Attack Surface of the Affected System or Service",
diff --git a/data/json/decision_points/technical_impact_1_0_0.json b/data/json/decision_points/technical_impact_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "TI",
   "name": "Technical Impact",
   "description": "The technical impact of the vulnerability.",
diff --git a/data/json/decision_points/utility_1_0_0.json b/data/json/decision_points/utility_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "U",
   "name": "Utility",
   "description": "The Usefulness of the Exploit to the Adversary",
diff --git a/data/json/decision_points/utility_1_0_1.json b/data/json/decision_points/utility_1_0_1.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.1",
+  "schemaVersion": "1-0-1",
   "key": "U",
   "name": "Utility",
   "description": "The Usefulness of the Exploit to the Adversary",
diff --git a/data/json/decision_points/value_density_1_0_0.json b/data/json/decision_points/value_density_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "VD",
   "name": "Value Density",
   "description": "The concentration of value in the target",
diff --git a/data/json/decision_points/virulence_1_0_0.json b/data/json/decision_points/virulence_1_0_0.json
@@ -1,6 +1,7 @@
 {
   "namespace": "ssvc",
   "version": "1.0.0",
+  "schemaVersion": "1-0-1",
   "key": "V",
   "name": "Virulence",
   "description": "The speed at which the vulnerability can be exploited.",
diff --git a/data/schema/Decision_Point.schema.json b/data/schema/Decision_Point.schema.json
diff --git a/data/schema/Decision_Point_Group.schema.json b/data/schema/Decision_Point_Group.schema.json
diff --git a/data/schema/current/Decision_Point.schema.json b/data/schema/current/Decision_Point.schema.json
@@ -0,0 +1 @@
+../v1/Decision_Point-1-0-1.schema.json
diff --git a/data/schema/current/Decision_Point_Group.schema.json b/data/schema/current/Decision_Point_Group.schema.json
@@ -0,0 +1 @@
+../v1/Decision_Point_Group-1-0-1.schema.json
diff --git a/data/schema/current/Decision_Point_Value_Selection.schema.json b/data/schema/current/Decision_Point_Value_Selection.schema.json
@@ -0,0 +1 @@
+../v1/Decision_Point_Value_Selection-1-0-1.schema.json
diff --git a/data/schema/v1/Decision_Point-1-0-1.schema.json b/data/schema/v1/Decision_Point-1-0-1.schema.json
diff --git a/data/schema/v1/Decision_Point_Group-1-0-1.schema.json b/data/schema/v1/Decision_Point_Group-1-0-1.schema.json
diff --git a/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json b/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json
diff --git a/data/schema_examples/CVE-1969-0000-Decision_Point_Value_Selection.json b/data/schema_examples/CVE-1969-0000-Decision_Point_Value_Selection.json
diff --git a/requirements.txt b/requirements.txt
diff --git a/src/ssvc/__init__.py b/src/ssvc/__init__.py
diff --git a/src/ssvc/_mixins.py b/src/ssvc/_mixins.py
diff --git a/src/ssvc/policy_generator.py b/src/ssvc/policy_generator.py
diff --git a/src/test/test_schema.py b/src/test/test_schema.py

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"namespace": "ssvc",`
`3`	`3`	`"version": "2.0.0",`
	`4`	`+ "schemaVersion": "1-0-1",`
`4`	`5`	`"key": "A",`
`5`	`6`	`"name": "Automatable",`
`6`	`7`	`"description": "Can an attacker reliably automate creating exploitation events for this vulnerability?",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"namespace": "ssvc",`
`3`	`3`	`"version": "1.0.0",`
	`4`	`+ "schemaVersion": "1-0-1",`
`4`	`5`	`"key": "E",`
`5`	`6`	`"name": "Exploitation",`
`6`	`7`	`"description": "The present state of exploitation of the vulnerability.",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"namespace": "ssvc",`
`3`	`3`	`"version": "1.1.0",`
	`4`	`+ "schemaVersion": "1-0-1",`
`4`	`5`	`"key": "E",`
`5`	`6`	`"name": "Exploitation",`
`6`	`7`	`"description": "The present state of exploitation of the vulnerability.",`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,5 @@`
`1`	`1`	`{`
	`2`	`+ "schemaVersion": "1-0-1",`
`2`	`3`	`"namespace": "ssvc",`
`3`	`4`	`"version": "1.0.0",`
`4`	`5`	`"key": "HI",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,7 @@`
`1`	`1`	`{`
`2`	`2`	`"namespace": "ssvc",`
`3`	`3`	`"version": "2.0.1",`
	`4`	`+ "schemaVersion": "1-0-1",`
`4`	`5`	`"key": "HI",`
`5`	`6`	`"name": "Human Impact",`
`6`	`7`	`"description": "Human Impact is a combination of Safety and Mission impacts.",`