Publish SSVC v2025.9 #958
Merged
Publish SSVC v2025.9 #958
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Co-authored-by: tschmidtb51 <[email protected]>
Co-authored-by: tschmidtb51 <[email protected]>
Co-authored-by: tschmidtb51 <[email protected]>
to `.example.test#test` from `.com.example#foo` and other combinations.
Co-authored-by: tschmidtb51 <[email protected]>
Co-authored-by: tschmidtb51 <[email protected]>
remove old textual description in favor of a link to the ABNF, which is a more precise description. Avoid duplication this way.
- addresses review comments of #882 - update a few examples - corrected "model" to "collection"
… feature/fastapi
ahouseholder
requested review from
ahouseholder,
cgyarbrough and
j---
as code owners
ahouseholder
approved these changes
Sep 17, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
The changes are too big to list here.
Planning the release of : https://certcc.github.io/SSVC/ for all content to be ready.
Things to check out include:
updated calculator https://certcc.github.io/SSVC/ssvc-calc/
new policy explorer https://certcc.github.io/SSVC/ssvc-explorer/
HowTo articles about using EPSS with SSVC https://certcc.github.io/SSVC/howto/using_epss/
HowTo article about docker containers https://certcc.github.io/SSVC/howto/tools/containers/
HowTo articles about implementing CVSS v4 equivalence sets in SSVC https://certcc.github.io/SSVC/howto/cvss_v4/
Revamped rendering of decision points, value tables, and decision trees (all automatically generated now from python objects) in https://certcc.github.io/SSVC/howto/supplier_tree (and deployer and coordinator ones too)
new diagrams for compound decision points https://certcc.github.io/SSVC/reference/decision_points/human_impact/ https://certcc.github.io/SSVC/reference/decision_points/public_safety_impact/ https://certcc.github.io/SSVC/reference/decision_points/utility/
I think that's most of the big changes. Please poke around at the links above and let us know if you see anything wonky or broken.