display the highest ssvc decision in vulnerability popover

Signed-off-by: tdruez <tdruez@aboutcode.org>

Author: tdruez

component_catalog/templates/component_catalog/includes/vulnerability_info_popover.html

@@ -29,6 +29,9 @@
     <div class='mb-1'><strong>Exploitability:</strong> {{ vulnerability.get_exploitability_display }}</div>
   {% endif %}
   {% if vulnerability.risk_score %}
-    <div><strong>Risk:</strong> {{ vulnerability.risk_score }}</div>
+    <div class='mb-1'><strong>Risk:</strong> {{ vulnerability.risk_score }}</div>
+  {% endif %}
+  {% if vulnerability.highest_ssvc_decision %}
+    <div><strong>SSVC:</strong> {{ vulnerability.highest_ssvc_decision }}</div>
   {% endif %}
 </div>

vulnerabilities/models.py

@@ -208,6 +208,14 @@ def cve(self):
             if alias.startswith("CVE-"):
                 return alias
 
+    @property
+    def highest_ssvc_decision(self):
+        """Return the most severe SSVC decision among this vulnerability's published trees."""
+        decisions = {tree.get("decision") for tree in self.ssvc_trees}
+        for decision in ("Act", "Attend", "Track*", "Track"):
+            if decision in decisions:
+                return decision
+
     def add_affected(self, instances, update_score=True):
         """Assign the ``instances`` (Package or Product) as affected by this vulnerability."""
         if not isinstance(instances, (list, tuple, models.QuerySet)):