docs: documentation regarding vex and triage

.github/actions/spelling/allow.txt

@@ -40,6 +40,7 @@ bcca
 bdbd
 bdist
 bestpractices
+bfb
 bhargavh
 bigbird
 bind
@@ -67,8 +68,10 @@ bzip
 c
 cabextract
 capnproto
+cbt
 CDNs
 ceph
+cfa
 cfea
 cff
 chaitanyamogal
@@ -136,6 +139,8 @@ dgst
 dhclient
 dhcpcd
 dhcpd
+dio
+Dio
 distro
 distros
 dmidecode
@@ -175,6 +180,7 @@ exiv
 expat
 exploitability
 Exploitablity
+extenstion
 f
 faad
 facebook
@@ -192,6 +198,7 @@ filterdiv
 firefox
 flac
 fluidsynth
+flutterchina
 freeradius
 freerdp
 FReeshabh
@@ -217,6 +224,7 @@ Gemfiles
 geopy
 getenv
 gettext
+GHSA
 gimp
 Giridhar
 git
@@ -386,6 +394,7 @@ lz
 mailx
 malloc
 malware
+Management
 Manjaro
 mariadb
 mariuszskon
@@ -427,14 +436,16 @@ msys
 mtr
 mupdf
 mutt
+myapp
+myappvendor
 myfork
 mypy
 mysource
 mysql
 Mystylesheet
 MYUSERNAME
-namespaces
 namespace
+namespaces
 nano
 nasm
 nbd
@@ -463,6 +474,7 @@ noreferrer
 nosec
 nowdailynever
 nplurals
+npm
 ntfs
 ntia
 ntp
@@ -570,6 +582,7 @@ renv
 reportlab
 requirementstxt
 rhythmrx
+Rishabh
 Romi
 rossburton
 rpm
@@ -652,6 +665,7 @@ tesseract
 testfiles
 tgz
 thrift
+throughout
 thttpd
 thunderbird
 timeline
@@ -696,9 +710,11 @@ utf
 util
 utkarsh
 utm
+uuid
 varnish
 venv
 VEXs
+vextype
 vfy
 vim
 virtualenv
@@ -709,6 +725,7 @@ Vorbis
 vorbis
 VPkg
 vsftpd
+Vulnerability
 Vulnerabity
 vulnerablities
 vulnerablity

doc/MANUAL.md

@@ -858,7 +858,7 @@ The type of SBOM is assumed to be SPDX unless specified using the `--sbom` optio
 This option is used as a part of a filtering/triaging process using Vulnerablity Exploitability eXchange (VEX) file. The tool supports VEX files in given formats including
 [CSAF](https://oasis-open.github.io/csaf-documentation/), [CycloneDX](https://cyclonedx.org/capabilities/vex/) and [OpenVEX](https://edu.chainguard.dev/open-source/sbom/what-is-openvex/)
 
-| SBOM Type | Format   | Filename extension |
+| VEX Type  | Format   | Filename extension |
 | --------- | -------- | ------------------ |
 | CycloneDX | JSON     | .json              |
 | CSAF      | JSON     | .json              |

doc/index.rst

@@ -22,6 +22,7 @@ The CVE Binary Tool helps you determine if your system includes known vulnerabil
    PARSERS.rst
    sources.md
    sboms_for_humans/README.md
+   triaging_process.md
    new-contributor-tips.md
    pypi_downloads.md
    mismatch_data.md