search

gocsaf / csaf

Tools to download or provide CSAF (Common Security Advisory Framework) documents.
https://csaf.io
42 stars 25 forks source link

Checker: Summary for provider role #305

Closed h4b4n3r0 closed 1 year ago

h4b4n3r0 commented 2 years ago

Currently the checker issues at our side 3x success ("type": 0) for requirements 8, 9 and 10 with following messages:

"Performed no in-depth test of security.txt." "Since no valid provider-metadata.json was found, no extended check was performed." "No check about contents from https://csaf.data.security.DOMAIN performed."

Each message on its own does not look to me like a "success".

Even more, as at least one of requirements 8-10 is required for the CSAF provider, it should somewhere be mentioned, that none of these checks was successful, but at least one is required.

tschmidtb51 commented 2 years ago

This is also related to #284, I guess.

JanHoefelmeyer commented 1 year ago

Should be solved by https://github.com/csaf-poc/csaf_distribution/pull/370 and the general checker rework.