What is the process for adding a new field/container to the CVE Record format?
The field we would like to propose is gcveMetadata.
Our main motivation is that the current publication process relies on existing CNA-enabled software, such as Vulnogram. Adding this field would allow seamless integration of GCVE processes with those existing tools and the CNA process.
Further context and discussion can be found in GCVE BCP-05 where we rely in the CVE record format:
https://discourse.ossbase.org/t/gcve-bcp-05-drafting-best-practices-for-the-container-format-modified-cve-record-format/121/11