-
Export the results of the vulnerabilities triage and processing as CSAF VEX document
-
It should be possible to add MITREs Common Attack Pattern Enumerations and Classifications (CAPEC) to a vulnerability in CSAF. This field should be optional like it is in CVE entries and may be an arr…
-
The instrumentation is there -> https://oasis-open.github.io/csaf-documentation/tools.html which comes with a downloader: https://github.com/csaf-poc/csaf_distribution/blob/main/docs/csaf_downloader.m…
-
To facilitate more usage of CSAF, how would a go library have to be constructed to be able to help implementors to access the contents of the advisories?
### potential use cases
* https://github.c…
-
Please expand the Common Security Advisory Framework (CSAF) format when generating notes and sharing the notes through the API
-
So far we have developed two CSAF document specific approaches to create a relational database schema
that is suitable for a CSAF Management System. As we need fast responses for an interactive appl…
-
[ISDUBA](https://github.com/ISDuBA/ISDuBA) is a repo where we implement an application which allows users to compare different CSAF documents. Especially the case where users can compare different doc…
-
Hi, any chance to support that?
https://oasis-open.github.io/csaf-documentation/
it is a JSON based standard
https://github.com/oasis-tcs/csaf/blob/master/csaf_2.0/json_schema/csaf_json_schema.js…
-
Today, I came across a weird report regarding OpenPGP stating:
```
Requirement 20: Public OpenPGP Key (failed)
- ERROR: Fingerprint of public OpenPGP key https://example.com/.well-known/csaf/op…
-
As it was mention in several issues already (#1100, #1079) it might be beneficial to add a "generic" [CSAF](https://docs.oasis-open.org/csaf/csaf/v2.0/csaf-v2.0.html) importer. This would help to inge…