https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship
Provides an SSVC assessment for a vulnerability.
Focus nodes of this shape (security:SsvcVulnAssessmentRelationship) can have the following properties:
| PROPERTY | DESCRIPTION | MIN | MAX | VALUE TYPE | OTHER CONSTRAINTS |
|---|---|---|---|---|---|
| security:decisionType | Provide the enumeration of possible decisions in the [Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). | 1 | 1 | security:SsvcDecisionType sh:IRI |
sh:in
security:SsvcDecisionType/act, security:SsvcDecisionType/attend, security:SsvcDecisionType/track, security:SsvcDecisionType/trackStar
|
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdf: <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix security: <https://spdx.org/rdf/3.0.1/terms/Security/> .
@prefix sh: <http://www.w3.org/ns/shacl#> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .
security:SsvcVulnAssessmentRelationship a owl:Class,
sh:NodeShape ;
rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ;
rdfs:subClassOf security:VulnAssessmentRelationship ;
sh:nodeKind sh:IRI ;
sh:property [ sh:class security:SsvcDecisionType ;
sh:in ( <https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act> <https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend> <https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track> <https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar> ) ;
sh:maxCount 1 ;
sh:minCount 1 ;
sh:nodeKind sh:IRI ;
sh:path security:decisionType ] .