-
We found a CSAF file that is ~100MB: https://access.redhat.com/security/data/csaf/v2/advisories/2018/rhsa-2018_3140.json
We will enlarge our restriction.
-
similar to sbom directory but all files will be in source tree (instead of generated like sbom are). The csaf files currently in /sbom will move to /csaf while the sbom files will stay in /sbom
-
# What did you do? (required. The issue will be **closed** when not provided.)
I ran vuls on redhat 8.6 with curl 7.61.1-22.el8_6.4 installed
# What did you expect to happen?
I expected to get 0:…
-
For PURLs we do have an optimized importer by now. A list of PURLs from an SBOM get's batch importer, with an upsert strategy.
However, for CPEs we still have the single "get or insert" strategy. A…
ctron updated
1 month ago
-
I had a quick look at the CSAF files produced by CERT/CC's VINCE instance: The `revision_history` and `/document/tracking/version` information differs from the human readable advisory, e.g. `VU#572615…
-
Dear GitHub team,
it would be nice, if your security advisories would also be available in the [Common Security Advisory Framework](https://docs.oasis-open.org/csaf/csaf/v2.0/csaf-v2.0.html). CSAF sp…
-
It would be beneficial to add a FAQ section. Questions could be:
- What is CSAF?
- Which problem is addressed by CSAF?
- Can I use CSAF?
- Does vendor X issues CSAF documents?
-
-
## Proposal
> Add a schema identifier to CSAF v2.1 (and later) data files with a `MAY` (to minimize backward incompatibility for strict CSAF v2.0 files which are not allowed to carry extra keys)
…
-
Features to import/discuss:
- [ ] where should the examples live / repo structure
- [ ] separate the scheduler and the communication mechanism.
- [ ] RosMsgs
- [ ] ZMQ
- [ ] Compatibility with ex…