Remove CVSS validation (#178)

Based on conversation on #168, the CVSS validation by pure regex is too strict, so remove. Fixes: #168 Signed-off-by: Andrew Pollock <[email protected]>
ossf · Jul 19, 2023 · a2972fc · a2972fc
1 parent ce10afb
commit a2972fc
Showing 1 changed file with 0 additions and 34 deletions.
diff --git a/validation/schema.json b/validation/schema.json
@@ -296,40 +296,6 @@
             "type": "string"
           }
         },
-        "allOf": [
-          {
-            "if": {
-              "properties": {
-                "type": {
-                  "const": "CVSS_V2"
-                }
-              }
-            },
-            "then": {
-              "properties": {
-                "score": {
-                  "pattern": "AV:[NAL]\\/AC:[LMH]\\/A[Uu]:[NSM]\\/C:[NPC]\\/I:[NPC]\\/A:[NPC]"
-                }
-              }
-            }
-          },
-          {
-            "if": {
-              "properties": {
-                "type": {
-                  "const": "CVSS_V3"
-                }
-              }
-            },
-            "then": {
-              "properties": {
-                "score": {
-                  "pattern": "CVSS:3\\.[0-9]\\/AV:[NALP]\\/AC:[LH]\\/PR:[NLH]\\/UI:[NR]\\/S:[UC]\\/C:[NLH]\\/I:[NLH]\\/A:[NLH]"
-                }
-              }
-            }
-          }
-        ],
         "required": [
           "type",
           "score"