gocsaf / csaf

Tools to download or provide CSAF (Common Security Advisory Framework) documents.
https://csaf.io
40 stars 23 forks source link

Go-Library: Create a method to check whether a go-structure uses valid patterns to be a csaf-document #569

Open JanHoefelmeyer opened 3 months ago

JanHoefelmeyer commented 3 months ago

This should be done by checking if the entries match the patterns, and should be especially tailored towards https://github.com/csaf-poc/csaf_distribution/issues/559.

An explanation of the schema can be seen here.

The relevant patterns can be seen here.

CPE and purls should however be matched against the 2.1 specification, see here for the purl pattern and see here for the CPE pattern