-
Currently, the `csaf_checker` accepts HTTP header redirects when checking for [requirement 9](https://docs.oasis-open.org/csaf/csaf/v2.0/os/csaf-v2.0-os.html#719-requirement-9-well-known-url-for-provi…
-
CSAF Advisories may be assigned to a person.
-
Points to discuss :
**1)** How to distribute the config file? For now it's inside the package, shall we put it inside `/etc/`, `/usr/local/share` or some other path?
See: https://github.com/csa…
-
### Relation Name
hash
### Description
Refers to a resource that contains the context's hash value. The resource content SHALL start with the first byte of the hexadecimal hash value. Any subsequen…
-
The `csaf_checker` fails on `tibco.com` and `www.tibco.com`, but they provide a PMD at `https://www.tibco.com/.well-known/csaf/provider-metadata.json`. We need to investigate why.
-
The [conformance clause 5: CVRF CSAF converter](https://github.com/oasis-tcs/csaf/blob/master/csaf_2.0/prose/csaf-v2-editor-draft.md#915-conformance-clause-5-cvrf-csaf-converter) states the conversion…
-
Both Flags ( -n , --nostore ) are not working. Help-Menu or Implementation is currently wrong.
Examples:
```
csaf_downloader.exe -n www.siemens.com
unknown flag `n'
2023/09/08 13:40:33 error:…
-
Is there any reference implementation of CSAF? Such as a Python library or alike? Thank you very much
-
Using csaf_distribution-v2.1.0-gnulinux-amd64: when downloading from redhat.com
the signatures do not verify.
```bash
curl -L -O https://github.com/csaf-poc/csaf_distribution/releases/download/v2…
-
Currently, some publishing parties include the `/document/tracking/id` in the `/document/title`. We should add an optional test (and quick fix / conversion rule) that checks on this.
Reasoning:
Th…