gocsaf / csaf

Tools to download or provide CSAF (Common Security Advisory Framework) documents.
https://csaf.io
42 stars 25 forks source link

Avoid misunderstandings in requirement 1 #338

Closed tschmidtb51 closed 1 year ago

tschmidtb51 commented 1 year ago

If no remote validator is given, the csaf_checker emits:

    - INFO: No remote validator configured
    - INFO: All advisories validated fine.

However, this can cause misunderstandings as the mandatory tests can't be executed without the remote validator (at least right now...).

I suggest we change the text for this case:

    - WARN: No remote validator configured
    - INFO: All advisories validated fine against the schema.

Even if the remote validator is configured, we need to clarify the result as one can just execute a specific set of tests (e.g. just the informative) that won't invalidate the CSAF documents.

_tested with csafchecker v2.0.1-60-g05ad714