example of informaitonal GSD

9 views
Skip to first unread message

Kurt Seifried

unread,
Feb 23, 2022, 2:02:50 PMFeb 23
to GSD Discussion Group
https://github.com/cloudsecurityalliance/gsd-database/issues/2265

now the question is how should we tag it as "not a vulnerability per se, but informational"?

I would suggest a top level GSD namespace {"tags": ["tag1", "tag2", "etc"]} such as: {"tags": "informational"}

My other thought was we overload  "vulnerability_type" with "informational" but in this case that would also lose some machine-readable data potentially.

Kurt Seifried (He/Him)
Chief Blockchain Officer and Director of Special Projects
Cloud Security Alliance
Reply all
Reply to author
Forward
0 new messages