oasis-tcs / csaf

OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secondary artifacts like meeting minutes and productivity code
https://github.com/oasis-tcs/csaf
Other
150 stars 40 forks source link

Create CSAF 2.0 conversion and validation tool #8

Closed santosomar closed 5 years ago

santosomar commented 5 years ago

Create a new CSAF 2.0 parser to test the draft CSAF 2.0 documents.

santosomar commented 5 years ago

@ericjohnson-tibco has created a CSAF 2.0 Parser.

https://github.com/TIBCOSoftware/vulnrep

The "Vulnerability Reporting Library" implements Go APIs and command line tooling for parsing and exporting CVRF and CSAF vulnerability report representations.

Additional functionality and features of the CSAF 2.0 Parser / "Vulnerability Reporting Library" is tracked at: https://github.com/TIBCOSoftware/vulnrep/blob/master/TODO.md

To download and prepare all the appropriate schema files used for testing run the prep.go script at: https://github.com/TIBCOSoftware/vulnrep/blob/master/cmd/prep/prep.go