slug: rhel
provider: Red Hat Enterprise Linux
generated_by: planning/capability-mapping/scripts/classify_capabilities.py
model: claude-opus-5
frame:
- Software & Technology
min_confidence: 0.7
capability_model:
  source: https://github.com/vincentmakes/turbo-ea-capabilities
  license: CC-BY-4.0
  attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities,
    CC BY 4.0
  notice: NOTICE
edge_count: 3
edges:
- tag: Advisories
  spec_file: rhel-advisories-api-openapi.yml
  capability_id: BC-620.40
  capability_id_l1: BC-620
  capability_name: Vulnerability Management
  confidence: 0.85
  evidence: GET /cvrf/{advisoryId}.json  getAdvisory  Get Security Advisory; "access to CVE (Common Vulnerabilities
    and Exposures) data, CSAF security advisories, and OVAL vulnerability assessment data ... for automated
    vulnerability management workflows"
  reason: Retrieval of CVE/CSAF security advisories feeding vulnerability assessment and patching workflows
    is squarely Vulnerability Management within Cybersecurity.
- tag: CVEs
  spec_file: rhel-cves-api-openapi.yml
  capability_id: BC-620.40
  capability_id_l1: BC-620
  capability_name: Vulnerability Management
  confidence: 0.85
  evidence: '"provides access to CVE (Common Vulnerabilities and Exposures) data, CSAF security advisories,
    and OVAL vulnerability assessment data" with "List CVEs" / "Get CVE" for "automated vulnerability
    management workflows"'
  reason: The operations serve vulnerability (CVE) data feeds intended for vulnerability scanning and
    remediation workflows, which is Vulnerability Management under Cybersecurity.
- tag: OVAL
  spec_file: rhel-oval-api-openapi.yml
  capability_id: BC-620.40
  capability_id_l1: BC-620
  capability_name: Vulnerability Management
  confidence: 0.8
  evidence: '"Get OVAL Stream" ... "OVAL vulnerability assessment data for Red Hat Enterprise Linux"'
  reason: A single endpoint delivering OVAL vulnerability-assessment definitions used by scanners; squarely
    vulnerability management content, not a business-domain object.