Engineering DRIs: - ~"group::threat insights" @Quintasan - ~"group::composition analysis" @hacks4oats ### Release notes ### Proposal 1. Add support for CVSS vectors 1. In the [security report schemas](https://gitlab.com/gitlab-org/security-products/security-report-schemas). 2. Ingest the CVSS vector into the Vulnerability Management DB models. 1. Update select scanners to emit a report with a CVSS vector. 1. Include the CVSS information in the CSV export. ### Not in scope for this epic: - UI updates (i.e. displaying the CVSS vector or score in the UI) - All the GitLab scanners (i.e. only the selected ones will be included) ### Links - [Engineering estimate](https://gitlab.com/gitlab-org/gitlab/-/issues/218601#note_1499856118) (internal comment) - <!-- triage-serverless v3 PLEASE DO NOT REMOVE THIS SECTION --> *This page may contain information related to upcoming products, features and functionality. It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes. Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.* <!-- triage-serverless v3 PLEASE DO NOT REMOVE THIS SECTION -->