Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

A new Vulnerability Findings class #698

Merged
merged 7 commits into from
Aug 1, 2023
Merged

A new Vulnerability Findings class #698

merged 7 commits into from
Aug 1, 2023

Conversation

floydtree
Copy link
Contributor

@floydtree floydtree commented Jul 20, 2023

Related Issue: #684

Description of changes:

  1. A new Vulnerability Finding class & related changes -
  2. Attribute additions/modifications -
    • added affected_packages
    • cvss is now an array
    • added package_manager
    • added purl
  3. Changing name of the base class to finding from findings to be consistent with other ocsf classes
  4. Adding constraints to the analytic object
  5. Adding title, desc, references to the cve object
  6. Description cleanup for finding object
  7. Added first_seen_time, last_seen_time to the vulnerability object

@floydtree floydtree added breaking Any breaking, non backwards compatible changes findings Issues related to Findings Category enhancement New feature or request labels Jul 20, 2023
objects/cve.json Outdated Show resolved Hide resolved
@floydtree floydtree changed the title A new Vulnerability Findings class - DRAFT A new Vulnerability Findings class Jul 27, 2023
@floydtree floydtree marked this pull request as ready for review July 27, 2023 18:39
awhite456
awhite456 previously approved these changes Jul 27, 2023
Copy link
Contributor

@awhite456 awhite456 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, look forward to more finding types in the future

Copy link
Contributor

@Aniak5 Aniak5 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
breaking Any breaking, non backwards compatible changes enhancement New feature or request findings Issues related to Findings Category
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants