Skip to content

Fix deployer decision points doc: Utility → Automatable#1084

Merged
ahouseholder merged 3 commits intomainfrom
copilot/update-deployer-decision-doc
Mar 11, 2026
Merged

Fix deployer decision points doc: Utility → Automatable#1084
ahouseholder merged 3 commits intomainfrom
copilot/update-deployer-decision-doc

Conversation

Copy link
Contributor

Copilot AI commented Mar 11, 2026

The Deployer decision model was updated in code (via #248) to use Automatable instead of Utility (which was a compound of Automatable + Value Density), but the documentation at docs/howto/deployer_tree.md was not updated to match.

  • Updated the decision points list to reference Automatable instead of Utility, matching the current DEPLOYER_3 model definition
-- [*Utility*](../reference/decision_points/utility.md) - The more useful a vulnerability is to an attacker, the more likely it is to be given a higher priority.
+- [*Automatable*](../reference/decision_points/automatable.md) - The more automatable a vulnerability is, the more likely it is to be given a higher priority.

Note: The dynamic content sections (decision point details, decision table, mermaid diagram) were already correct since they render from the Python code via markdown-exec.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • astral.sh
    • Triggering command: /usr/bin/curl curl -LsSf REDACTED (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Original prompt

This section details on the original issue you should resolve

<issue_title>SSVC Deployer Decision Points doc is out of date</issue_title>
<issue_description>Describe the bug

At some point in the recent past, we changed the Deployer decision model to use Automatable instead of Utility (which was comprised of Automatable and Value Density). While this change happened in our code, we did not update the accompanying markdown documentation.

To Reproduce
Steps to reproduce the behavior:

  1. Go to https://certcc.github.io/SSVC/howto/deployer_tree/#deployer-decision-points
  2. Observe that we list "Utility" instead of "Automatable"

Expected behavior

Update https://github.com/CERTCC/SSVC/blob/main/docs/howto/deployer_tree.md to reflect the UtilityAutomatable change.

</issue_description>

Comments on the Issue (you are @copilot in this section)

@ahouseholder Linking for posterity:

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Co-authored-by: sei-renae <190382933+sei-renae@users.noreply.github.com>
Copilot AI changed the title [WIP] Update SSVC Deployer decision points documentation Fix deployer decision points doc: Utility → Automatable Mar 11, 2026
@sei-renae sei-renae marked this pull request as ready for review March 11, 2026 15:52
Copilot AI review requested due to automatic review settings March 11, 2026 15:53
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the Deployer decision model documentation to match the current SSVC Deployer (DEPLOYER_3) definition, replacing the outdated Utility decision point reference with Automatable.

Changes:

  • Replaced the Deployer decision-point list entry from Utility to Automatable and updated the link/description accordingly.

@ahouseholder ahouseholder merged commit 6fa7f11 into main Mar 11, 2026
5 checks passed
@ahouseholder ahouseholder deleted the copilot/update-deployer-decision-doc branch March 11, 2026 16:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SSVC Deployer Decision Points doc is out of date

4 participants