oasis-tcs / csaf

OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secondary artifacts like meeting minutes and productivity code
https://github.com/oasis-tcs/csaf
Other
147 stars 39 forks source link

CVRF V1.2 Schema Locations Broken #10

Closed constcast closed 5 years ago

constcast commented 5 years ago

Hi,

the schema files in the repository and on the OASIS web site cannot currently be used to validate CVRF V1.2 files.

The namespace definition published at:

http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf

refers to the schema location at:

http://docs.oasis-open.org/csaf/csaf-cvrf/v1.2/cs01/schemas

However, the cvrf.xsd in this GIT repository (cvrf_1.2/csaf_cvrf/schemas/cvrf.xsd), and on the OASIS website (http://docs.oasis-open.org/csaf/csaf-cvrf/v1.2/cs01/schemas/cvrf.xsd) reference schema files to be hosted on http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2:

This breaks validation because the files are not available on this location. It would be either required to publish the schema files at

http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/

or to change cvrf.xsd to point to the real location of the XSD files:

http://docs.oasis-open.org/csaf/csaf-cvrf/v1.2/cs01/schemas/

santosomar commented 5 years ago

The best approach may be to change cvrf.xsd to point to the real location of the XSD files:

http://docs.oasis-open.org/csaf/csaf-cvrf/v1.2/cs01/schemas

We will discuss in the TC meeting today (2019-06-26) and will edit the file accordingly.

santosomar commented 5 years ago

The correct location is documented at:

http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf

http://docs.oasis-open.org/csaf/csaf-cvrf/v1.2/cs01/schemas/common.xsd

http://docs.oasis-open.org/csaf/csaf-cvrf/v1.2/cs01/schemas/cvrf.xsd

http://docs.oasis-open.org/csaf/csaf-cvrf/v1.2/cs01/schemas/prod.xsd

http://docs.oasis-open.org/csaf/csaf-cvrf/v1.2/cs01/schemas/vuln.xsd

santosomar commented 5 years ago

Fixed by https://github.com/oasis-tcs/csaf/commit/d4e24afd326668ce891a53ceed99cece5c801e07

santosomar commented 5 years ago

@constcast - please verify https://github.com/oasis-tcs/csaf/commit/d4e24afd326668ce891a53ceed99cece5c801e07

sthagen commented 5 years ago

Suggest to remove the extra h 😄

santosomar commented 5 years ago

Suggest to remove the extra h 😄

Thank you @sdrees ! I fixed the typo with https://github.com/oasis-tcs/csaf/commit/430cc98ba3ea524f9cb0ab8986b8e0a04e518ab2

Thanks again! Omar