SystemSh0cker/gocsaf
1
0
Fork 0
mirror of https://github.com/gocsaf/csaf.git synced 2025-12-22 05:40:11 +01:00
Code Issues Releases Activity Actions

Add check for missing either sha256 or sha512 hashes only

Browse source
This commit is contained in:
JanHoefelmeyer 2025-01-10 11:42:54 +01:00
parent 9275a37a9f
commit b6721e1d5a
3 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
cmd/csaf_checker/processor.go
View file

@ -584,6 +584,10 @@ func (p *processor) rolieFeedEntries(feed string) ([]csaf.AdvisoryFile, error) {
var file csaf.AdvisoryFile var file csaf.AdvisoryFile
switch { switch {
case sha256 == "" && sha512 != "":
p.badROLIEFeed.info("%s has no sha256 hash file listed", url)
case sha256 != "" && sha512 == "":
p.badROLIEFeed.info("%s has no sha512 hash file listed", url)
case sha256 == "" && sha512 == "": case sha256 == "" && sha512 == "":
p.badROLIEFeed.error("No hash listed on ROLIE feed %s", url) p.badROLIEFeed.error("No hash listed on ROLIE feed %s", url)
case sign == "": case sign == "":

2
testdata/processor-requirements/sha256-rolie.json vendored
View file

@ -153,7 +153,7 @@
"messages": [ "messages": [
{ {
"type": 0, "type": 0,
"text": "All checked ROLIE feeds validated fine." "text": "{{.URL}}/white/avendor-advisory-0004.json has no sha512 hash file listed"
} }
] ]
}, },

2
testdata/processor-requirements/sha512-rolie.json vendored
View file

@ -153,7 +153,7 @@
"messages": [ "messages": [
{ {
"type": 0, "type": 0,
"text": "All checked ROLIE feeds validated fine." "text": "{{.URL}}/white/avendor-advisory-0004.json has no sha256 hash file listed"
} }
] ]
}, },