~sthagen/csaf-lint

Experimental CSAF envelope and body profile validator.
d6837189 — Stefan Hagen a day ago
Bumped dev deps (pip-licenses==4.0.2)
da55b0bb — Stefan Hagen a day ago
Bumped test deps (hypothesis==6.60.0)
9273447e — Stefan Hagen a day ago
Bumped dev deps (pytest-xdist==3.1.0)

refs

default
browse  log 
v2022.7.17
browse  .tar.gz 

clone

read-only
https://git.sr.ht/~sthagen/csaf-lint
read/write
git@git.sr.ht:~sthagen/csaf-lint

You can also use your local clone with git send-email.

#CSAF Lint

Experimental CSAF envelope and body profile validator.

License: MIT

version downloads wheel supported-versions supported-implementations

In short: The current version of the csaf-lint validates documents in various Common Security Advisory Framework (CSAF) formats against built-in or user custom schema files.

The supported versions are:

  • CSAF 2.0 (default is now the 2021.03.23 editor version)
  • CSAF 1.2 (aka CVRF 1.2)
  • CSAF 1.1 (aka CVRF 1.1)

#Caveat Emptor

  1. Expect changes to the CSAF v2.0 support because the underlying OASIS specification is undergoing development by the members of the OASIS technical committee. This may lead to breaking changes until the standard is published on committee specification level. The current supported draft JSON Schema versions are from 2021-03-23, 2021-03-19, and 2021-03-07.
  2. The previous versions namely CVRF 1.1 and 1.2 were in XML format.
  3. The current version CSAF 2.0-candidates are in JSON Schema format.

Available on PyPI as csaf-lint

#Installing

Recommended installation of current experimental package:

❯ python -m pipx install csaf-lint

#Status

Experimental.

Note: The default branch is default.