vrt 0.13.6 → 0.13.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (41) hide show
  1. checksums.yaml +4 -4
  2. data/lib/data/1.18/deprecated-node-mapping.json +335 -0
  3. data/lib/data/1.18/mappings/cvss_v3/cvss_v3.json +1418 -0
  4. data/lib/data/1.18/mappings/cvss_v3/cvss_v3.schema.json +59 -0
  5. data/lib/data/1.18/mappings/cvss_v4/cvss_v4.json +2340 -0
  6. data/lib/data/1.18/mappings/cvss_v4/cvss_v4.schema.json +62 -0
  7. data/lib/data/1.18/mappings/cwe/cwe.json +1167 -0
  8. data/lib/data/1.18/mappings/cwe/cwe.schema.json +63 -0
  9. data/lib/data/1.18/mappings/remediation_advice/remediation_advice.json +2107 -0
  10. data/lib/data/1.18/mappings/remediation_advice/remediation_advice.schema.json +75 -0
  11. data/lib/data/1.18/third-party-mappings/remediation_training/secure-code-warrior-links.json +540 -0
  12. data/lib/data/1.18/vrt.schema.json +63 -0
  13. data/lib/data/1.18/vulnerability-rating-taxonomy.json +3371 -0
  14. data/lib/data/1.18.1/deprecated-node-mapping.json +341 -0
  15. data/lib/data/1.18.1/mappings/cvss_v3/cvss_v3.json +1602 -0
  16. data/lib/data/1.18.1/mappings/cvss_v3/cvss_v3.schema.json +59 -0
  17. data/lib/data/1.18.1/mappings/cvss_v4/cvss_v4.json +2521 -0
  18. data/lib/data/1.18.1/mappings/cvss_v4/cvss_v4.schema.json +62 -0
  19. data/lib/data/1.18.1/mappings/cwe/cwe.json +1363 -0
  20. data/lib/data/1.18.1/mappings/cwe/cwe.schema.json +63 -0
  21. data/lib/data/1.18.1/mappings/remediation_advice/remediation_advice.json +2300 -0
  22. data/lib/data/1.18.1/mappings/remediation_advice/remediation_advice.schema.json +75 -0
  23. data/lib/data/1.18.1/scw_links.json +583 -0
  24. data/lib/data/1.18.1/third-party-mappings/remediation_training/secure-code-warrior-links.json +583 -0
  25. data/lib/data/1.18.1/vrt.schema.json +63 -0
  26. data/lib/data/1.18.1/vulnerability-rating-taxonomy.json +3638 -0
  27. data/lib/data/1.19/deprecated-node-mapping.json +341 -0
  28. data/lib/data/1.19/mappings/cvss_v3/cvss_v3.json +1602 -0
  29. data/lib/data/1.19/mappings/cvss_v3/cvss_v3.schema.json +59 -0
  30. data/lib/data/1.19/mappings/cvss_v4/cvss_v4.json +2521 -0
  31. data/lib/data/1.19/mappings/cvss_v4/cvss_v4.schema.json +62 -0
  32. data/lib/data/1.19/mappings/cwe/cwe.json +1363 -0
  33. data/lib/data/1.19/mappings/cwe/cwe.schema.json +63 -0
  34. data/lib/data/1.19/mappings/remediation_advice/remediation_advice.json +2300 -0
  35. data/lib/data/1.19/mappings/remediation_advice/remediation_advice.schema.json +75 -0
  36. data/lib/data/1.19/third-party-mappings/remediation_training/secure-code-warrior-links.json +583 -0
  37. data/lib/data/1.19/vrt.schema.json +63 -0
  38. data/lib/data/1.19/vulnerability-rating-taxonomy.json +3638 -0
  39. data/lib/vrt/version.rb +1 -1
  40. data/lib/vrt.rb +1 -1
  41. metadata +40 -7
@@ -0,0 +1,75 @@
1
+ {
2
+ "$schema": "http://json-schema.org/draft-04/schema#",
3
+ "title": "VRT to Remediation Advice",
4
+ "description": "Mapping from the Vulnerability Rating Taxonomy to Remediation Advice",
5
+ "definitions": {
6
+ "MappingMetadata": {
7
+ "type": "object",
8
+ "properties": {
9
+ "default": { "type": "null" },
10
+ "keys": { "type": "array",
11
+ "items": { "type": "string", "enum": ["remediation_advice", "references"] },
12
+ "minItems": 2,
13
+ "uniqueItems": true
14
+ }
15
+ },
16
+ "required": ["default", "keys"]
17
+ },
18
+ "VRTid": { "type": "string", "pattern": "^[a-z_]*$" },
19
+ "RemediationAdvice": { "type": "string" },
20
+ "References": { "type" : "array",
21
+ "items" : { "type": "string", "pattern": "^http[s]?:\/\/.*$" },
22
+ "minItems": 1,
23
+ "uniqueItems": true
24
+ },
25
+ "Mapping": {
26
+ "type": "object",
27
+ "properties": {
28
+ "id": { "$ref": "#/definitions/VRTid" },
29
+ "remediation_advice" : { "$ref": "#/definitions/RemediationAdvice" },
30
+ "references" : { "$ref": "#/definitions/References" }
31
+ },
32
+ "required": ["id"],
33
+ "anyOf": [
34
+ { "required": ["remediation_advice"] },
35
+ { "required": ["references"] }
36
+ ],
37
+ "additionalProperties": false
38
+ },
39
+ "MappingParent": {
40
+ "type": "object",
41
+ "properties": {
42
+ "id": { "$ref": "#/definitions/VRTid" },
43
+ "children": {
44
+ "type": "array",
45
+ "items" : {
46
+ "anyOf": [
47
+ { "$ref": "#/definitions/MappingParent" },
48
+ { "$ref": "#/definitions/Mapping" }
49
+ ]
50
+ }
51
+ },
52
+ "remediation_advice" : { "$ref": "#/definitions/RemediationAdvice" },
53
+ "references" : { "$ref": "#/definitions/References" }
54
+ },
55
+ "required": ["id", "children"],
56
+ "additionalProperties": false
57
+ }
58
+ },
59
+ "type": "object",
60
+ "required": ["metadata", "content"],
61
+ "properties": {
62
+ "metadata": {
63
+ "$ref": "#/definitions/MappingMetadata"
64
+ },
65
+ "content": {
66
+ "type": "array",
67
+ "items" : {
68
+ "anyOf": [
69
+ { "$ref": "#/definitions/MappingParent" },
70
+ { "$ref": "#/definitions/Mapping" }
71
+ ]
72
+ }
73
+ }
74
+ }
75
+ }