Struct Enrichment 

pub struct Enrichment {
    pub kev: BTreeSet<String>,
    pub epss: BTreeMap<String, f32>,
    pub cvss: BTreeMap<String, f32>,
}

CVE → exploit signals, used to annotate findings.

Fields

kev: BTreeSet<String>

CVE ids present in the CISA KEV catalog.

epss: BTreeMap<String, f32>

CVE → EPSS probability (0.0–1.0).

cvss: BTreeMap<String, f32>

CVE → CVSS base score (0.0–10.0) recovered from NVD, used to backfill the severity and the numeric score of advisories that carry no CVSS of their own. Empty on the offline (*_file) path.

Implementations

impl Enrichment

pub fn from_files( kev_path: Option<&Path>, epss_path: Option<&Path>, ) -> Result<Self, String>

Load from local files (offline): KEV catalog JSON and/or EPSS CSV (cve,epss,…). A None path contributes no data. The NVD CVSS backfill is network-only, so it is empty here.

pub fn apply(&self, findings: &mut [VulnFinding])

Annotate each finding from its CVE aliases: kev if any alias is in the catalog, epss to the maximum score across its aliases. For findings that scan as unknown, backfill both the severity and the numeric CVSS score from the worst NVD score across its aliases (never downgrading a severity the advisory already carries).

Trait Implementations

impl Clone for Enrichment

fn clone(&self) -> Enrichment

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Enrichment

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Enrichment

fn default() -> Enrichment

Returns the “default value” for a type.