Vulntology v0.6.0

[david-waltermire]

New and Notable

This is the first formal release of the Vulntology includes:

• A new Vulntology website, which includes a specification that defines the Vulntology objects and value lists, and many examples.
• A Vulntology JSON schema for working with the Vulntology in JSON.
• A beta-release of a web-based Vulntology editor, which can produce Vulntology JSON data.

What's Changed

• Initial project text by @david-waltermire-nist in Initial project text #31
• Add Readme to main page. Update the XSS example Figure by @Chris-Turner-NIST in Add Readme to main page. Update the XSS example Figure #32
• Updated to include Scope Statement by @Chris-Turner-NIST in Updated to include Scope Statement #33
• Inlined the vulntology graphic by @david-waltermire-nist in inlined the vulntology graphic #35
• Updated Figures for Update examples and figures based on VRDX Summit adjustments #22 by @Chris-Turner-NIST in Updating Figures for #22 #34
• Fixed typo in CONTRIBUTING.md by @david-waltermire-nist in Fixed typo in CONTRIBUTING.md #36
• Updated contributing and license content by @david-waltermire-nist in Updated contributing and license content #40
• Added Badges by @david-waltermire-nist in Added Badges #41
• Updating Examples and Figures to align by @Chris-Turner-NIST in Updating Examples and Figures to align #43
• Added graphsnippets and made them visible inline for each object/value by @Chris-Turner-NIST in Added graphsnippets and made them visible inline for each object/value #44
• Updating based on Tweak Entity Roles to include Vulnerable and Impacted Components #20 by @Chris-Turner-NIST in Updating based on #20 #42
• Updated content to be objects only, Changed file to .png, made in-line by @Chris-Turner-NIST in Updated content to be objects only, Changed file to .png, made in-line #45
• Changed Property to evidencedBy by @Chris-Turner-NIST in changed Property to evidencedBy #48
• Fixed bad link for vulnerability-identifier by @Chris-Turner-NIST in Fixed bad link for vulnerability-identifier #47
• Added various elements to support capability described in Add Concept of "origin" and "Dependent" products to Scenario #18 by @Chris-Turner-NIST in Added various elements to support capability described in #18 #49
• Adjusted changes to reflect relationship approach instead by @Chris-Turner-NIST in Adjusted changes to reflect relationship approach instead #50
• Updates to barrier addressing Finalize Descriptions for Barrier values #51 by @Chris-Turner-NIST in Updates to barrier addressing #51 #54
• Schema+figures by @Chris-Turner-NIST in Schema+figures #56
• Update Figures, Examples, Objects, Values and Explanation to align with schema adjustments by @Chris-Turner-NIST in Update Figures, Examples, Objects, Values and Explanation to align with schema adjustments #62
• Update README.md by @david-waltermire-nist in Update README.md #69
• Reducing required properties by @david-waltermire-nist in Reducing required properties #73
• Limit related property use for Add constraints within JSON Schema #58 by @david-waltermire-nist in Limit related property use for #58 #72
• Update schema enums by @Chris-Turner-NIST in Update schema enums #75
• Breakout CPE AS into seperate object definition by @Chris-Turner-NIST in Breakout CPE AS into seperate object definition #76
• Fix name typo and remove redundant LogicalImpact labeling. by @gscottwilson in Fix name typo and remove redundant LogicalImpact labeling. #78
• CONTRIBUTING.md: fix relative links pointing outside tree
  by @SamB in CONTRIBUTING.md: fix relative links pointing outside tree  #77
• Update a few discrepancies in the JSON Schema by @gscottwilson in Update a few discrepancies in the JSON Schema  #79
• updating required properties per Define philosophy regarding required fields in schema and flexibility in UI #81. by @david-waltermire-nist in updating required properties per #81. #80
• Add name propertyto senario+action by @Chris-Turner-NIST in Add name propertyto senario+action #84
• Initial documentation on versioning and branching by @david-waltermire-nist in Initial documentation on versioning and branching #86
• Enforce "neededPrivileges" when appropriate on Barrier by @david-waltermire-nist in Enforce "neededPrivileges" when appropriate on Barrier #85
• Updates to shift PrivEscape Is Privilege Escalation an Impact Method? #63 and minor change based on Define philosophy regarding required fields in schema and flexibility in UI #81 by @Chris-Turner-NIST in Updates to shift PrivEscape #63 and minor change based on #81 #83
• Updated schema with proper oneOf options for ImpactMethod hasEscapeContext is listed as a property of Action in the schema, which is incorrect #68 Is Privilege Escalation an Impact Method? #63 by @Chris-Turner-NIST in Updated schema with proper oneOf options for ImpactMethod #68 #63 #87
• Barrier one of updates Refactor Barrier and its types/subtypes/related properties  #61 by @Chris-Turner-NIST in Barrier one of updates #61 #88
• Update docs re impact method Update Documentation and Visuals for Changes from #63 #68 #90 by @Chris-Turner-NIST in Update docs re impact method #90 #92
• Barrier examples Resolves Reorganize the Barrier Object #53 by @Chris-Turner-NIST in Barrier examples Resolves #53 #91
• Add cve5 affects per Allow different methods to identify a vulnerable product that can be bound to JSON objects #55 by @Chris-Turner-NIST in Add cve5 affects per #55 #95
• Updates to sync schema with specification by @david-waltermire-nist in Updates to sync schema with specification #94
• Updated schema to support CVE4BASIC widget currently implemented in t… by @Chris-Turner-NIST in Updated schema to support CVE4BASIC widget currently implemented in t… #99
• Setup Hugo static site generation by @david-waltermire-nist in Setup Hugo static site generation #100
• Add experimental UI to website by @david-waltermire-nist in Add experimental UI to website #103
• Setup Hugo static site generation by @david-waltermire-nist in Setup Hugo static site generation #101
• Update link-check.yml by @david-waltermire-nist in Update link-check.yml #150

New Contributors

• @gscottwilson made their first contribution in Fix name typo and remove redundant LogicalImpact labeling. #78
• @SamB made their first contribution in CONTRIBUTING.md: fix relative links pointing outside tree  #77

Full Changelog: https://github.com/usnistgov/vulntology/commits/0.6.0

---

This discussion was created from the release Vulntology v0.6.0.