Currently I'm the only person running the script and updating CWE/CAPEC values. It would be nice to have some documentation around it, to let others maintain it (including CWE/CAPEC updates), and to have the content (and repsonsibility) shared.
In the long run we should look to automate this further. We should also seek to get smooth assignment of CWE/CAPEC as part of the issue and advisory creation process. Our current tooling likely makes that burdensome, but with more experience I think the community could come to good solutions.
Look in the repo. See the script is not there.
Commit the current version.
Add some docs.
Commit the current version.
Add some docs.
Active
1.0
Code
I've added all the CWE/CAPEC for May 7th and published the associated CVEs. The script is now in the repo and we can iterate from there.
Marking this issue as fixed :tada: