ssvc-v1.0.1.json

{
    "$schema": "http://json-schema.org/draft-07/schema#",
    "$id": "https://certcc.github.io/SSVC/data/schema/v1/Decision_Point_Group_Selection-1-0-1.schema.json",
    "definitions": {
	"id": {
            "type": "string",
            "description": "Identifier for a vulnerability could be CVE, CERT/CC VU#, OSV id, Bugtraq, GHSA etc.",
            "examples": ["CVE-2024-101010","VU#11111","GHSA-11a1-22b2-33c3"]
	},	
	"role": {
            "type": "string",
            "description": "Roles to define SSVC Stakeholders https://certcc.github.io/SSVC/topics/enumerating_stakeholders/",
            "examples": ["Supplier","Deployer","Coordinator"]
        },
	"timestamp" : {
            "description": "Date and time in ISO format  ISO 8601 format",
            "type": "string",
            "format": "date-time"
	},
        "schemaVersion": {
            "description": "Schema version used to represent this evaluation",
            "type": "string",
            "enum": ["1-0-1"]
        },
	"SsvcdecisionpointselectionSchema": {
	    "description": "A down-selection of SSVC Decision Points that represent an evaluation at a specific time of a Vulnerability",
	    "properties": {
		"name": {
		    "description": "Name of the Decision Point that were evaluated", 
		    "title": "name",
		    "type": "string",
		    "examples": ["Automatable", "Exploitation"]
		},
		"namespace": {
		    "description": "SSVC Namespace that were used for defining the evaluated Decision Points",
		    "title": "namespace",
		    "type": "string",
		    "examples": ["ssvc","cvvsv4"]
		},
		"values": {
		    "description": "Evaluated values of the Decision Point",
		    "title": "values",
		    "type": "array",
		    "minItems": 1,
		    "items": {
			"description": "Each value that were down-selected for a Decision Point",
			"title": "values",
			"type": "string"
		    }
		},
		"version": {
		    "description": "Version of the Decision Points that were evaluated",
		    "title": "version",
		    "type": "string"
		}
	    },
	    "type": "object",
	    "required": [
		"name",
		"namespace",
		"values",
		"version"
	    ],
	    "additionalProperties": false
	}
    },
    "properties": {
		"id": {
		    "$ref": "#/definitions/id"
		},
		"role": {
		    "$ref": "#/definitions/role"
		},
		"schemaVersion": {
		    "$ref": "#/definitions/schemaVersion"
		},
		"timestamp": {
		    "$ref": "#/definitions/timestamp"
		},
		"selections": {
		    "description" : "An array of Decision Points and their Values that were down-selected or evaluated ",
		    "title": "selections",
		    "type": "array",
		    "minItems": 1,
		    "items": {
			"$ref": "#/definitions/SsvcdecisionpointselectionSchema"
		    }
		}
    }, 
	    "type": "object",
	    "required": [
		"selections",
		"id",
		"timestamp",
		"schemaVersion"
	    ],
	    "additionalProperties": false
}