Improve display of SSVC in UI

[pombredanne]

I would like to have a better display of SSVC trees in the UI. Either use something like YANML rather than a Python repr or JSON, or as a visual tree

This is a follow up to this PR and issue:

• Collect SSVC trees #2050
• cravex2-reachability: Collect available SSVC in VulnerableCode #1963

[Mahaboobunnisa123]

Hi @pombredanne,
I'm interested in working on this issue as part of GSoC. I've gone through the issue details and I'd love to take ownership and start contributing.
My plan is to start with a small, reviewable PR that improves SSVC display in the UI (e.g., render as YAML instead of Python repr/JSON), and then iterate toward a tree-style visual display if desired. If it's available, could you please assign this issue to me?

[Aryan-SINGH-GIT]

Hi @pombredanne ,
I was working on this issue, but I couldn’t find any related SSVC data for nodejs_security_wg/npm-46.
I imported nodejs_security_wg, but there doesn’t seem to be any svccs data available.

i have made a script to make a TEST-SSVC-001
where i implemented YAML

my implementation :

• Custom Template Filter (transform_yaml.py): Created a new Django template filter using the PyYAML library to convert Python dictionaries into valid, human-readable YAML strings (safe_dump).
• Template Update (advisory_detail.html): Updated the advisory detail page to use the |to_yaml filter instead of the default pprint, ensuring SSVC decision options (Exploitation, Exposure, etc.) are displayed clearly

I’ll remove the unnecessary test script and open a PR with only the relevant changes.

[Mahaboobunnisa123]

Hi! Just a heads up — I (@Mahaboobunnisa123) have been working on this issue since Feb 6 [I commented already] and am actively preparing a PR. I'd appreciate it if we could coordinate to avoid duplicate effort. Happy to collaborate!

[Mahaboobunnisa123]

Hi @pombredanne,
I've opened a PR to address this: #2165
It replaces the pprint output with a clean YAML display using saneyaml (already a project dependency). The change is minimal:

• New: vulnerabilities/templatetags/ssvc_filters.py — a to_yaml template filter
• Modified: advisory_detail.html — swapped |pprint → |to_yaml
• New: vulnerabilities/tests/test_ssvc_filters.py — tests for the filter

No new dependencies added. Happy to iterate based on feedback!

[pombredanne]

@Mahaboobunnisa123 re: #2058 (comment)
Thanks. Please avoid to use AI to generate posts, PR descriptions and comments. We are coming with a policy, and I prefer poorly written human comments to AI-generated boring boilerplate

Also your first commit message line: Improve display of SSVC decision tree in UI using YAML format #2058 is a bit too long. Can you amend this so it is under 50 chars?

[Mahaboobunnisa123]

Got it @pombredanne Thank you for notifying me. I will be more careful while going forward. For the commit message, I will amend it to something like Improve SSVC UI display with YAML and that's under 50 chars. I will force-push once the PR feedback is clearer so I'm not amending repeatedly. Sorry for the noisy description earlier. Is this acceptable, then please allow me to continue working on this. I will be waiting for your response.