Supplier Contacted

Supplier Contacted v1.0.0

TextJSON

Has the reporter made a good-faith effort to contact the supplier of the vulnerable component using a quality contact method?

Value	Definition
No	The supplier has not been contacted.
Yes	The supplier has been contacted.

{
  "namespace": "ssvc",
  "version": "1.0.0",
  "schemaVersion": "1-0-1",
  "key": "SC",
  "name": "Supplier Contacted",
  "description": "Has the reporter made a good-faith effort to contact the supplier of the vulnerable component using a quality contact method?",
  "values": [
    {
      "key": "N",
      "name": "No",
      "description": "The supplier has not been contacted."
    },
    {
      "key": "Y",
      "name": "Yes",
      "description": "The supplier has been contacted."
    }
  ]
}

Quality Contact Method

A quality contact method is a publicly posted known good email address, public portal on vendor website, etc.