Add CVSS score to YAML schema (!430) · Merge requests · GitLab.org / security-products / advisory-database

Julian Thome requested to merge julian-cvss into master Nov 12, 2019

Based on our discussion, this MR applies the following changes:

Integrate new fields to the YAML schema (cvss_v2, cvss_v3) that can be used to store the CVSS vectors in versions 2 and 3. I would like to make it optional at the beginning until we have this data for all advisories; once we have cvss vectors for all advisories, we can enforce the presence of either cvss_v2 or cvss_v3.
Change the YAML schema validation accordingly
Update the documentation to reflect the schema change

Edited Nov 13, 2019 by Julian Thome

Add CVSS score to YAML schema