-
Kay searching for something and wants to see where in the resulting CSAF document(s) it appears.
As an example there are several places in a CSAF document where a component name could appear in a l…
-
Currently, we only enforce that a `csaf_security_advisory` has at least one `product_status`. That allows the production of CSAF security advisories with all products in status `fixed`. One might impl…
-
Trying to attest an OCI chart ends up discovering an `STRING` material type, but it should be `HELM_CHART` instead.
Running it in debug mode:
```
> cl att add --value ghcr.io/chainloop-dev/charts:l…
-
## Description
I would like to open a discussion regarding the file path convention for storing OpenVEX files within a Git repository. In the example of [Cilium](https://github.com/cilium/cilium/blob…
-
Feature-tracking issue dependent on #131
* possibilities
* [NIST API](https://nvd.nist.gov/developers/vulnerabilities)
* [CSAF](https://oasis-open.github.io/csaf-documentation/)
-
I noticed that, at least when importing, the server might consume huge amounts of memory (~3GiB). I know that some documents are just big. But we should keep an eye on this and try to improve the situ…
ctron updated
2 weeks ago
-
Like many, I was very excited to explore the 5.1 release with purported support for package url. But it turned out to be just a couple of string attributes `versionType` and `version`, that can be use…
-
Kay wants to **search** and then refine the inital search results by adding **filters**
until the wanted result subset is shown for CSAF documents.
Kay would understand if the initial search takes…
-
Dear colleagues,
the [Common Security Advisory Framework (CSAF)](https://docs.oasis-open.org/csaf/csaf/v2.0/csaf-v2.0.html) has been developed in an international effort to create a standard for mach…
-
Currently, the information shown about advisories are a port of the [csaf webview](https://github.com/csaf-poc/csaf_webview).
However, there are certain stylistic shortcomings and adjustments that …