Skip to content

Improve display of SSVC in UI #2058

Open

Description

@pombredanne

I would like to have a better display of SSVC trees in the UI. Either use something like YANML rather than a Python repr or JSON, or as a visual tree

This is a follow up to this PR and issue:

Activity

  1. Mahaboobunnisa123 commented on Feb 6, 2026

    @Mahaboobunnisa123

    Hi @pombredanne,
    I'm interested in working on this issue as part of GSoC. I've gone through the issue details and I'd love to take ownership and start contributing.
    My plan is to start with a small, reviewable PR that improves SSVC display in the UI (e.g., render as YAML instead of Python repr/JSON), and then iterate toward a tree-style visual display if desired. If it's available, could you please assign this issue to me?

  2. Aryan-SINGH-GIT commented on Feb 13, 2026

    @Aryan-SINGH-GIT

    Hi @pombredanne ,
    I was working on this issue, but I couldn’t find any related SSVC data for nodejs_security_wg/npm-46.
    I imported nodejs_security_wg, but there doesn’t seem to be any svccs data available.

    Image

    i have made a script to make a TEST-SSVC-001
    where i implemented YAML

    Image

    my implementation :

    • Custom Template Filter (transform_yaml.py): Created a new Django template filter using the PyYAML library to convert Python dictionaries into valid, human-readable YAML strings (safe_dump).
    • Template Update (advisory_detail.html): Updated the advisory detail page to use the |to_yaml filter instead of the default pprint, ensuring SSVC decision options (Exploitation, Exposure, etc.) are displayed clearly

    I’ll remove the unnecessary test script and open a PR with only the relevant changes.

  3. Mahaboobunnisa123 commented on Feb 15, 2026

    @Mahaboobunnisa123

    Hi! Just a heads up — I (@Mahaboobunnisa123) have been working on this issue since Feb 6 [I commented already] and am actively preparing a PR. I'd appreciate it if we could coordinate to avoid duplicate effort. Happy to collaborate!

  4. Mahaboobunnisa123 commented on Feb 15, 2026

    @Mahaboobunnisa123

    Hi @pombredanne,
    I've opened a PR to address this: #2165
    It replaces the pprint output with a clean YAML display using saneyaml (already a project dependency). The change is minimal:

    • New: vulnerabilities/templatetags/ssvc_filters.py — a to_yaml template filter
    • Modified: advisory_detail.html — swapped |pprint → |to_yaml
    • New: vulnerabilities/tests/test_ssvc_filters.py — tests for the filter

    No new dependencies added. Happy to iterate based on feedback!

  5. pombredanne commented on Feb 19, 2026

    @pombredanne
    MemberAuthor

    @Mahaboobunnisa123 re: #2058 (comment)
    Thanks. Please avoid to use AI to generate posts, PR descriptions and comments. We are coming with a policy, and I prefer poorly written human comments to AI-generated boring boilerplate

    Also your first commit message line: Improve display of SSVC decision tree in UI using YAML format #2058 is a bit too long. Can you amend this so it is under 50 chars?

  6. Mahaboobunnisa123 commented on Feb 19, 2026

    @Mahaboobunnisa123

    Got it @pombredanne Thank you for notifying me. I will be more careful while going forward. For the commit message, I will amend it to something like Improve SSVC UI display with YAML and that's under 50 chars. I will force-push once the PR feedback is clearer so I'm not amending repeatedly. Sorry for the noisy description earlier. Is this acceptable, then please allow me to continue working on this. I will be waiting for your response.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions