Skip to content

Conversation

@ahouseholder
Copy link
Contributor

and adds documentation pages for the six CVSS v4 EQ set DecisionTable objects added in

Copilot Summary

This pull request adds comprehensive documentation and navigation for modeling CVSS v4 Equivalence Sets and their Qualitative Severity Rating using SSVC decision tables. It introduces a new set of "how-to" documentation pages—one for each of the six CVSS v4 equivalence sets and one for the qualitative severity rating—explaining the analyst's workflow, decision points, outcomes, and providing executable examples and visualizations. The navigation is updated to include these new resources, and minor terminology corrections are made in the codebase for consistency.

Key changes:

Documentation: CVSS v4 Equivalence Sets and Qualitative Severity Rating

  • Added new documentation pages for each CVSS v4 equivalence set (eq1.md through eq6.md) and for the qualitative severity rating (qualitative.md). These pages describe the analyst's workflow, decision points, outcomes, and include executable code blocks and decision model visualizations. [1] [2] [3] [4] [5] [6] [7]
  • Added an overview page (index.md) explaining how SSVC can be used to model CVSS v4 assessments, the relationship between SSVC and CVSS, and how qualitative severity ratings are derived from equivalence sets.

Navigation Updates

  • Updated the mkdocs.yml navigation to include a new "CVSS v4 Analyst Models" section, linking to all new documentation pages for easy access.

Terminology Consistency

  • Fixed terminology in code and test helpers from "Equivalency Set" to "Equivalence Set" for accuracy and consistency with CVSS v4 specification. (qualitative_severity.py, _v4expected.py) [1] [2]

@ahouseholder ahouseholder changed the title Feature/cvss v4 docs Add CVSS v4 DecisionTable docs for EQ1-6, Qualitative Severity Rating Aug 18, 2025
@ahouseholder ahouseholder requested review from sei-vsarvepalli and removed request for sei-vsarvepalli August 18, 2025 19:54
@ahouseholder ahouseholder self-assigned this Aug 18, 2025
@ahouseholder ahouseholder added content/semantic Changes to the semantic content of the SSVC documentation integration Related to integration of SSVC into another framework or system labels Aug 18, 2025
@ahouseholder ahouseholder added this to the 2025-09 milestone Aug 18, 2025
@ahouseholder ahouseholder linked an issue Aug 18, 2025 that may be closed by this pull request
@ahouseholder
Copy link
Contributor Author

CVSS v4 EQ1 top of page CVSS v4 EQ2 top of page CVSS v4 EQ1 visualization CVSS v4 EQ1 tabular CVSS v4 QSR top of page CVSS v4 QSR visualization CVSS v4 QSR table

@ahouseholder ahouseholder merged commit 62fe442 into feature/dt_to_mermaid Aug 19, 2025
2 checks passed
@ahouseholder ahouseholder deleted the feature/cvss_v4_docs branch August 19, 2025 13:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

content/semantic Changes to the semantic content of the SSVC documentation integration Related to integration of SSVC into another framework or system

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add documentation for CVSS v4 DecisionTables

4 participants