-
Notifications
You must be signed in to change notification settings - Fork 3
/
configuration.yml
40 lines (38 loc) · 1.22 KB
/
configuration.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
---
targets:
- target : "default"
update_to : "latest"
- target : "12"
update_to : "13"
cve_urgency_levels:
- cve_urgency_conditions:
max_baseScore : 20
deadline_days: 2
name: "critical"
- cve_urgency_conditions:
max_baseScore : 10
average_baseScore : 5
max_exploitabilityScore : 8
average_exploitabilityScore : 5
max_impactScore : 8
average_impactScore : 5
number_CVEs : 10
number_actively_exploited_CVEs : 5
fraction_actively_exploited_CVEs : 0.7
formulas:
- comparison : "average"
formula : "baseScore * exploitabilityScore * impactScore"
threshold : 100
- comparison : "max"
formula : "baseScore * exploitabilityScore * impactScore * is_actively_exploited"
threshold : 200
- comparison : "sum"
formula : "baseScore * impactScore * is_actively_exploited"
threshold : 300
- comparison : "n_above"
formula : "baseScore * impactScore * is_actively_exploited"
n : 2
threshold : 150
deadline_days : 7
conjunction : false
default_deadline_days : 14