Skip to content

Commit 2e4a5d6

Browse files
committed
add new SSVC rule in documentation
Signed-off-by: tdruez <tdruez@aboutcode.org>
1 parent 0b5d153 commit 2e4a5d6

1 file changed

Lines changed: 6 additions & 1 deletion

File tree

docs/reference-vulnerability-triage.rst

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ that are relevant to its security program via the **Admin** interface.
1919
1. Built-in Rules
2020
-----------------
2121

22-
Seven rules are available out of the box. Each rule implements a specific detection
22+
Eight rules are available out of the box. Each rule implements a specific detection
2323
condition evaluated against the vulnerabilities known to affect the product's packages.
2424

2525
.. list-table::
@@ -40,6 +40,11 @@ condition evaluated against the vulnerabilities known to affect the product's pa
4040
| ``exploited_vulnerability``
4141
- Detects vulnerabilities for which a known active exploit is available
4242
(exploitability value equals 2.0).
43+
* - | **SSVC Decision**
44+
| ``ssvc_decision``
45+
- Detects vulnerabilities whose `SSVC <https://www.cisa.gov/ssvc-calculator>`_
46+
decision tree recommends **Attend** or **Act** (immediate attention required).
47+
Matches if any of the vulnerability's published SSVC trees meets this threshold.
4348
* - | **Reachable Vulnerability**
4449
| ``reachable_vulnerability``
4550
- Detects vulnerabilities confirmed as reachable in the product context: at least

0 commit comments

Comments
 (0)