diff --git a/src/vcio/vcio_report.py b/src/vcio/vcio_report.py index 0638594..a42fa5b 100644 --- a/src/vcio/vcio_report.py +++ b/src/vcio/vcio_report.py @@ -317,14 +317,17 @@ def create_xlsx(purl_vulns, destination): if ref_scores: for ref_score in ref_scores: if ( - ref_score.get( - "scoring_system") == "cvssv3" - or ref_score.get("scoring_system") - == "generic_textual" + ref_score.get("scoring_system") == "archlinux" + or ref_score.get("scoring_system") == "cvssv2" + or ref_score.get("scoring_system") == "cvssv3" + or ref_score.get("scoring_system") == "cvssv3.1" + or ref_score.get("scoring_system") == "cvssv3.1_qr" + or ref_score.get("scoring_system") == "cvssv4" + or ref_score.get("scoring_system") == "epss" + or ref_score.get("scoring_system") == "generic_textual" or ref_score.get("scoring_system") == "rhas" or ref_score.get("scoring_system") == "rhbs" - or ref_score.get("scoring_system") - == "cvssv3.1_qr" + or ref_score.get("scoring_system") == "ssvc" ): vuln_severity = ref_score.get( "value") diff --git a/tests/data/vcio_report/vcio_report-expected-output-multiple-input-purls.xlsx b/tests/data/vcio_report/vcio_report-expected-output-multiple-input-purls.xlsx index c522804..c936f7d 100644 Binary files a/tests/data/vcio_report/vcio_report-expected-output-multiple-input-purls.xlsx and b/tests/data/vcio_report/vcio_report-expected-output-multiple-input-purls.xlsx differ diff --git a/tests/data/vcio_report/vcio_report-expected-output-single-input-purl.xlsx b/tests/data/vcio_report/vcio_report-expected-output-single-input-purl.xlsx index e883f10..f1a702b 100644 Binary files a/tests/data/vcio_report/vcio_report-expected-output-single-input-purl.xlsx and b/tests/data/vcio_report/vcio_report-expected-output-single-input-purl.xlsx differ