Integrate turvallisuusneuvonta

[sustefil]

As discussed here:

https://github.com/csaf-tools/CVRF-CSAF-Converter/issues/14#issuecomment-1039012590

Integrate the mandatory tests into cvrf2csaf.py:

https://github.com/sthagen/turvallisuusneuvonta

[sustefil]

Hi @sthagen ,

Could you pretty please push a new turvallisuusneuvonta version to PyPi? The current one (2022.2.13) doesn't include the mandatory package, so I cannot:

import turvallisuusneuvonta.csaf.core.rules.mandatory.mandatory

Thanks!

[sthagen]

https://github.com/sthagen/turvallisuusneuvonta/issues/11 → v2022.2.14 on PyPI:

• Usage 🧪
• API 🚀

The Programming API gives some hints on how to not have to type import monsters 👹 like import turvallisuusneuvonta.csaf.core.rules.mandatory.mandatory.

PS: When all rules are implemented and kind of tested:

1. the now established public API will remain
2. the private (spike) implementations will have been replaced
3. the functionality will enter the target PyPI package csaf

@sustefil, @cgi1, @tschmidtb51: When (3.) is accomplished, the python internal use will be as simple as:

import csaf

csaf_doc_as_dict = ...  # essentially a json.load(...)

if csaf.is_valid(csaf_doc_as_dict):
    print('CSAF document is valid')

[tschmidtb51]

@sthagen Thanks for the great work!