SystemSh0cker/gocsaf
1
0
Fork 0
mirror of https://github.com/gocsaf/csaf.git synced 2025-12-22 11:55:40 +01:00
Code Issues Releases Activity Actions

Merge pull request #18 from csaf-poc/third-party-licenses

Browse source 
Add Third party licenses info
This commit is contained in:
Bernhard E. Reiter 2022-01-10 15:25:38 +01:00 • committed by GitHub
commit 5bd049bf01
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 30 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

20
3rdpartylicenses.md Normal file
View file

@ -0,0 +1,20 @@
## The used third party dependencies and their licenses
| Dependency | License |
| -------------------------------------------------- | ------------ |
| github.com/BurntSushi/toml | MIT |
| github.com/PaesslerAG/jsonpath | BSD-3-Clause |
| github.com/PaesslerAG/gval | BSD-3-Clause |
| github.com/ProtonMail/gopenpgp/v2 | MIT |
| github.com/jessevdk/go-flags | BSD-3-Clause |
| github.com/mitchellh/go-homedir | MIT |
| github.com/santhosh-tekuri/jsonschema | Apache-2.0 |
| golang.org/x/crypto | BSD-3-Clause |
| github.com/ProtonMail/go-crypto | BSD-3-Clause |
| github.com/ProtonMail/go-mime | MIT |
| github.com/konsorten/go-windows-terminal-sequences | MIT |
| github.com/pkg/errors | BSD-2-Clause |
| github.com/sirupsen/logrus | MIT |
| golang.org/x/sys | BSD-3-Clause |
| golang.org/x/term | BSD-3-Clause |
| golang.org/x/text | BSD-3-Clause |

17
README.md
View file

@ -1,6 +1,6 @@
# csaf_distribution
**WIP**: A prove of concept for a CSAF trusted provider, checker and aggregator.
**WIP**: A proof of concept for a CSAF trusted provider, checker and aggregator.
## Setup
@ -19,8 +19,8 @@
- To configure nginx see [docs/provider-setup.md](docs/provider-setup.md)
## csaf_uploader
csaf_uploader is a command line tool that upload CSAF-Documents to the trusted provider (CSAF_Provider).
Follwoing options are supported:
csaf_uploader is a command line tool that uploads CSAF documents to the trusted provider (CSAF_Provider).
Following options are supported:
| Options | Description |
| ------------------------------------------ | ------------------------------------------------------------------------------------------ |
@ -36,13 +36,13 @@ Follwoing options are supported:
| -c, --config=INI-FILE | Path to config ini file |
| -h, --help | Show help |
E.g. of Creating the initial directiories and files.
E.g. creating the initial directiories and files
```
./csaf_uploader -a create -u http://localhost/cgi-bin/csaf_provider.go
```
E.g. of Uploading a csaf-document
E.g. uploading a csaf-document
```
./csaf_uploader -a upload -I -t white -u http://localhost/cgi-bin/csaf_provider.go CSAF-document-1.json
@ -63,10 +63,13 @@ action=create
u=http://localhost/cgi-bin/csaf_provider.go
```
## License
- csaf_distribution is licensed as Free Software under MIT License.
- See the specific source files
for details, the license itself can be found in the directory `LICENSES`.
for details, the license itself can be found in the directory `LICENSES/`.
- Contains third party Free Software components under licenses that to our best knowledge are compatible at time of adding the dependency, [3rdpartylicenses.md](3rdpartylicenses.md) has the details.
- Check the source file of each schema under `/csaf/schema/` to see the source and license of each one.