mirror of
https://github.com/gocsaf/csaf.git
synced 2025-12-22 05:40:11 +01:00
Merge unittest into sha-handling
commit990c74a1a6Merge:86d7ce17824f3bAuthor: koplas <pschwabauer@intevation.de> Date: Fri Nov 22 16:58:46 2024 +0100 Merge branch 'sha-handling' into unittest commit86d7ce13dcMerge:a6807d279b8900Author: koplas <pschwabauer@intevation.de> Date: Fri Nov 22 16:54:45 2024 +0100 Merge branch 'sha-handling' into unittest commit79b89009ddAuthor: koplas <pschwabauer@intevation.de> Date: Fri Nov 22 16:31:56 2024 +0100 Improve hash fetching and logging commita6807d24d6Merge:ddb5518d18d2c3Author: koplas <pschwabauer@intevation.de> Date: Fri Nov 22 16:51:55 2024 +0100 Merge branch 'sha-handling' into unittest commitd18d2c3bf1Author: koplas <pschwabauer@intevation.de> Date: Fri Nov 22 16:31:56 2024 +0100 Improve hash fetching and logging commitddb5518c6dAuthor: koplas <54645365+koplas@users.noreply.github.com> Date: Tue Sep 17 10:45:25 2024 +0200 Extend SHA marking tests commit13c94f4fa0Author: koplas <pschwabauer@intevation.de> Date: Mon Sep 16 20:46:31 2024 +0200 Use temp directory for downloads commit1819b4896bAuthor: koplas <pschwabauer@intevation.de> Date: Mon Sep 16 20:37:55 2024 +0200 Fix rolie feed commit989e3667baAuthor: koplas <pschwabauer@intevation.de> Date: Mon Sep 16 20:23:22 2024 +0200 Fix provider-metadata.json commit714735d74aAuthor: koplas <pschwabauer@intevation.de> Date: Mon Sep 16 20:08:21 2024 +0200 Implement provider handler commitd488e39947Author: koplas <pschwabauer@intevation.de> Date: Mon Sep 16 16:26:37 2024 +0200 Add info about gpg key commita9bf9da130Author: koplas <pschwabauer@intevation.de> Date: Mon Sep 16 16:12:49 2024 +0200 Rename directory testdata commit6ca6dfee25Author: koplas <pschwabauer@intevation.de> Date: Mon Sep 16 16:01:41 2024 +0200 Add initial downloader tests commit20bee797c6Author: koplas <pschwabauer@intevation.de> Date: Mon Sep 16 15:58:31 2024 +0200 Fix: Remove unecessary error print commit8e4e508073Author: koplas <pschwabauer@intevation.de> Date: Mon Sep 16 14:50:48 2024 +0200 Extend links test commit3ba29f94deAuthor: koplas <pschwabauer@intevation.de> Date: Mon Sep 16 14:11:14 2024 +0200 Add initial directory feed testdata commitdee55aafd9Author: koplas <54645365+koplas@users.noreply.github.com> Date: Mon Sep 16 10:47:32 2024 +0200 Add initial testdata commitcd9338ae72Author: koplas <54645365+koplas@users.noreply.github.com> Date: Thu Sep 12 15:54:42 2024 +0200 Add initial download unittests
This commit is contained in:
parent
7824f3b48d
commit
ffb4eff933
30 changed files with 1115 additions and 4 deletions
2
testdata/simple-directory-provider/openpgp/info.txt
vendored
Normal file
2
testdata/simple-directory-provider/openpgp/info.txt
vendored
Normal file
|
|
@ -0,0 +1,2 @@
|
|||
The GPG key was generated with no passphrase and this command:
|
||||
`gpg --default-new-key-algo "ed25519/cert,sign+cv25519/encr" --quick-generate-key security@example.com"`
|
||||
15
testdata/simple-directory-provider/openpgp/privkey.asc
vendored
Normal file
15
testdata/simple-directory-provider/openpgp/privkey.asc
vendored
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
-----BEGIN PGP PRIVATE KEY BLOCK-----
|
||||
|
||||
lFgEZtsQNxYJKwYBBAHaRw8BAQdASr3y4zW+4XGqUlvRJ7stRCUHv8HB4ZoMoTtU
|
||||
KLgnHr4AAQD5G5xy/yTN5b+lvV5Ahrbz1qOZ/wmKTieGOH9GZb6JwhHwtBRzZWN1
|
||||
cml0eUBleGFtcGxlLmNvbYiZBBMWCgBBFiEEqJFMovEROcammgAY+zzZsV3mFZYF
|
||||
AmbbEDcCGwMFCQWjmoAFCwkIBwICIgIGFQoJCAsCBBYCAwECHgcCF4AACgkQ+zzZ
|
||||
sV3mFZZskQEAg5Dttqm6TA7MtLxz7VSlklx95LQr9d5jm4jcOaqlGT0A/1mAAlUq
|
||||
SDySFGI6DFQLcaZaUd9Yl+1b0Icr0tUiOaQHnF0EZtsQNxIKKwYBBAGXVQEFAQEH
|
||||
QOTHP4FkopIGJMWXTYsaeQ1Dugd+yNYWB357vRYq6QsiAwEIBwAA/0RIazq1s8Oe
|
||||
23jvNaZGb/adDYnRrkCMXXTBKsuA6WOAEhKIeAQYFgoAIBYhBKiRTKLxETnGppoA
|
||||
GPs82bFd5hWWBQJm2xA3AhsMAAoJEPs82bFd5hWWDKABAOl+NoM6FBhKAvckUXDR
|
||||
MLZ4k778N4Vy9VHbectjRKj1AQCO3JOmON+U6/mjohXrc2bwzKzt2yGiLP2HMxDx
|
||||
uzMXBQ==
|
||||
=4XHC
|
||||
-----END PGP PRIVATE KEY BLOCK-----
|
||||
13
testdata/simple-directory-provider/openpgp/pubkey.asc
vendored
Normal file
13
testdata/simple-directory-provider/openpgp/pubkey.asc
vendored
Normal file
|
|
@ -0,0 +1,13 @@
|
|||
-----BEGIN PGP PUBLIC KEY BLOCK-----
|
||||
|
||||
mDMEZtsQNxYJKwYBBAHaRw8BAQdASr3y4zW+4XGqUlvRJ7stRCUHv8HB4ZoMoTtU
|
||||
KLgnHr60FHNlY3VyaXR5QGV4YW1wbGUuY29tiJkEExYKAEEWIQSokUyi8RE5xqaa
|
||||
ABj7PNmxXeYVlgUCZtsQNwIbAwUJBaOagAULCQgHAgIiAgYVCgkICwIEFgIDAQIe
|
||||
BwIXgAAKCRD7PNmxXeYVlmyRAQCDkO22qbpMDsy0vHPtVKWSXH3ktCv13mObiNw5
|
||||
qqUZPQD/WYACVSpIPJIUYjoMVAtxplpR31iX7VvQhyvS1SI5pAe4OARm2xA3Egor
|
||||
BgEEAZdVAQUBAQdA5Mc/gWSikgYkxZdNixp5DUO6B37I1hYHfnu9FirpCyIDAQgH
|
||||
iHgEGBYKACAWIQSokUyi8RE5xqaaABj7PNmxXeYVlgUCZtsQNwIbDAAKCRD7PNmx
|
||||
XeYVlgygAQDpfjaDOhQYSgL3JFFw0TC2eJO+/DeFcvVR23nLY0So9QEAjtyTpjjf
|
||||
lOv5o6IV63Nm8Mys7dshoiz9hzMQ8bszFwU=
|
||||
=rhGT
|
||||
-----END PGP PUBLIC KEY BLOCK-----
|
||||
25
testdata/simple-directory-provider/provider-metadata.json
vendored
Normal file
25
testdata/simple-directory-provider/provider-metadata.json
vendored
Normal file
|
|
@ -0,0 +1,25 @@
|
|||
{
|
||||
"canonical_url": "{{.URL}}/provider-metadata.json",
|
||||
"distributions": [
|
||||
{
|
||||
"directory_url": "{{.URL}}/white/"
|
||||
}
|
||||
],
|
||||
"last_updated": "2020-01-01T00:00:00Z",
|
||||
"list_on_CSAF_aggregators": true,
|
||||
"metadata_version": "2.0",
|
||||
"mirror_on_CSAF_aggregators": true,
|
||||
"public_openpgp_keys": [
|
||||
{
|
||||
"fingerprint": "A8914CA2F11139C6A69A0018FB3CD9B15DE61596",
|
||||
"url": "{{.URL}}/openpgp/pubkey.asc"
|
||||
}
|
||||
],
|
||||
"publisher": {
|
||||
"category": "vendor",
|
||||
"name": "ACME Inc",
|
||||
"namespace": "https://example.com",
|
||||
"contact_details": "mailto:security@example.com"
|
||||
},
|
||||
"role": "csaf_trusted_provider"
|
||||
}
|
||||
2
testdata/simple-directory-provider/security.txt
vendored
Normal file
2
testdata/simple-directory-provider/security.txt
vendored
Normal file
|
|
@ -0,0 +1,2 @@
|
|||
CSAF: /provider-metadata.json
|
||||
|
||||
170
testdata/simple-directory-provider/white/avendor-advisory-0004-not-listed.json
vendored
Normal file
170
testdata/simple-directory-provider/white/avendor-advisory-0004-not-listed.json
vendored
Normal file
|
|
@ -0,0 +1,170 @@
|
|||
{
|
||||
"document": {
|
||||
"category": "csaf_vex",
|
||||
"csaf_version": "2.0",
|
||||
"distribution": {
|
||||
"tlp": {
|
||||
"label": "WHITE",
|
||||
"url": "https://www.first.org/tlp/v1/"
|
||||
}
|
||||
},
|
||||
"notes": [
|
||||
{
|
||||
"category": "summary",
|
||||
"title": "Test document summary",
|
||||
"text": "Auto generated test CSAF document"
|
||||
}
|
||||
],
|
||||
"publisher": {
|
||||
"category": "vendor",
|
||||
"name": "ACME Inc.",
|
||||
"namespace": "https://www.example.com"
|
||||
},
|
||||
"title": "Test CSAF document",
|
||||
"tracking": {
|
||||
"current_release_date": "2020-01-01T00:00:00Z",
|
||||
"generator": {
|
||||
"date": "2020-01-01T00:00:00Z",
|
||||
"engine": {
|
||||
"name": "csaf-tool",
|
||||
"version": "0.3.2"
|
||||
}
|
||||
},
|
||||
"id": "Avendor-advisory-0004",
|
||||
"initial_release_date": "2020-01-01T00:00:00Z",
|
||||
"revision_history": [
|
||||
{
|
||||
"date": "2020-01-01T00:00:00Z",
|
||||
"number": "1",
|
||||
"summary": "Initial version"
|
||||
}
|
||||
],
|
||||
"status": "final",
|
||||
"version": "1"
|
||||
}
|
||||
},
|
||||
"product_tree": {
|
||||
"branches": [
|
||||
{
|
||||
"category": "vendor",
|
||||
"name": "AVendor",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_name",
|
||||
"name": "product_1",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_version",
|
||||
"name": "1.1",
|
||||
"product": {
|
||||
"name": "AVendor product_1 1.1",
|
||||
"product_id": "CSAFPID_0001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"category": "product_version",
|
||||
"name": "1.2",
|
||||
"product": {
|
||||
"name": "AVendor product_1 1.2",
|
||||
"product_id": "CSAFPID_0002"
|
||||
}
|
||||
},
|
||||
{
|
||||
"category": "product_version",
|
||||
"name": "2.0",
|
||||
"product": {
|
||||
"name": "AVendor product_1 2.0",
|
||||
"product_id": "CSAFPID_0003"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "vendor",
|
||||
"name": "AVendor1",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_name",
|
||||
"name": "product_2",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_version",
|
||||
"name": "1",
|
||||
"product": {
|
||||
"name": "AVendor1 product_2 1",
|
||||
"product_id": "CSAFPID_0004"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "vendor",
|
||||
"name": "AVendor",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_name",
|
||||
"name": "product_3",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_version",
|
||||
"name": "2022H2",
|
||||
"product": {
|
||||
"name": "AVendor product_3 2022H2",
|
||||
"product_id": "CSAFPID_0005"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"vulnerabilities": [
|
||||
{
|
||||
"cve": "CVE-2020-1234",
|
||||
"notes": [
|
||||
{
|
||||
"category": "description",
|
||||
"title": "CVE description",
|
||||
"text": "https://nvd.nist.gov/vuln/detail/CVE-2020-1234"
|
||||
}
|
||||
],
|
||||
"product_status": {
|
||||
"under_investigation": ["CSAFPID_0001"]
|
||||
},
|
||||
"threats": [
|
||||
{
|
||||
"category": "impact",
|
||||
"details": "Customers should upgrade to the latest version of the product",
|
||||
"date": "2020-01-01T00:00:00Z",
|
||||
"product_ids": ["CSAFPID_0001"]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"cve": "CVE-2020-9876",
|
||||
"notes": [
|
||||
{
|
||||
"category": "description",
|
||||
"title": "CVE description",
|
||||
"text": "https://nvd.nist.gov/vuln/detail/CVE-2020-9876"
|
||||
}
|
||||
],
|
||||
"product_status": {
|
||||
"under_investigation": ["CSAFPID_0001"]
|
||||
},
|
||||
"threats": [
|
||||
{
|
||||
"category": "impact",
|
||||
"details": "Still under investigation",
|
||||
"date": "2020-01-01T00:00:00Z",
|
||||
"product_ids": ["CSAFPID_0001"]
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
170
testdata/simple-directory-provider/white/avendor-advisory-0004.json
vendored
Normal file
170
testdata/simple-directory-provider/white/avendor-advisory-0004.json
vendored
Normal file
|
|
@ -0,0 +1,170 @@
|
|||
{
|
||||
"document": {
|
||||
"category": "csaf_vex",
|
||||
"csaf_version": "2.0",
|
||||
"distribution": {
|
||||
"tlp": {
|
||||
"label": "WHITE",
|
||||
"url": "https://www.first.org/tlp/v1/"
|
||||
}
|
||||
},
|
||||
"notes": [
|
||||
{
|
||||
"category": "summary",
|
||||
"title": "Test document summary",
|
||||
"text": "Auto generated test CSAF document"
|
||||
}
|
||||
],
|
||||
"publisher": {
|
||||
"category": "vendor",
|
||||
"name": "ACME Inc.",
|
||||
"namespace": "https://www.example.com"
|
||||
},
|
||||
"title": "Test CSAF document",
|
||||
"tracking": {
|
||||
"current_release_date": "2020-01-01T00:00:00Z",
|
||||
"generator": {
|
||||
"date": "2020-01-01T00:00:00Z",
|
||||
"engine": {
|
||||
"name": "csaf-tool",
|
||||
"version": "0.3.2"
|
||||
}
|
||||
},
|
||||
"id": "Avendor-advisory-0004",
|
||||
"initial_release_date": "2020-01-01T00:00:00Z",
|
||||
"revision_history": [
|
||||
{
|
||||
"date": "2020-01-01T00:00:00Z",
|
||||
"number": "1",
|
||||
"summary": "Initial version"
|
||||
}
|
||||
],
|
||||
"status": "final",
|
||||
"version": "1"
|
||||
}
|
||||
},
|
||||
"product_tree": {
|
||||
"branches": [
|
||||
{
|
||||
"category": "vendor",
|
||||
"name": "AVendor",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_name",
|
||||
"name": "product_1",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_version",
|
||||
"name": "1.1",
|
||||
"product": {
|
||||
"name": "AVendor product_1 1.1",
|
||||
"product_id": "CSAFPID_0001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"category": "product_version",
|
||||
"name": "1.2",
|
||||
"product": {
|
||||
"name": "AVendor product_1 1.2",
|
||||
"product_id": "CSAFPID_0002"
|
||||
}
|
||||
},
|
||||
{
|
||||
"category": "product_version",
|
||||
"name": "2.0",
|
||||
"product": {
|
||||
"name": "AVendor product_1 2.0",
|
||||
"product_id": "CSAFPID_0003"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "vendor",
|
||||
"name": "AVendor1",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_name",
|
||||
"name": "product_2",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_version",
|
||||
"name": "1",
|
||||
"product": {
|
||||
"name": "AVendor1 product_2 1",
|
||||
"product_id": "CSAFPID_0004"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "vendor",
|
||||
"name": "AVendor",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_name",
|
||||
"name": "product_3",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_version",
|
||||
"name": "2022H2",
|
||||
"product": {
|
||||
"name": "AVendor product_3 2022H2",
|
||||
"product_id": "CSAFPID_0005"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"vulnerabilities": [
|
||||
{
|
||||
"cve": "CVE-2020-1234",
|
||||
"notes": [
|
||||
{
|
||||
"category": "description",
|
||||
"title": "CVE description",
|
||||
"text": "https://nvd.nist.gov/vuln/detail/CVE-2020-1234"
|
||||
}
|
||||
],
|
||||
"product_status": {
|
||||
"under_investigation": ["CSAFPID_0001"]
|
||||
},
|
||||
"threats": [
|
||||
{
|
||||
"category": "impact",
|
||||
"details": "Customers should upgrade to the latest version of the product",
|
||||
"date": "2020-01-01T00:00:00Z",
|
||||
"product_ids": ["CSAFPID_0001"]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"cve": "CVE-2020-9876",
|
||||
"notes": [
|
||||
{
|
||||
"category": "description",
|
||||
"title": "CVE description",
|
||||
"text": "https://nvd.nist.gov/vuln/detail/CVE-2020-9876"
|
||||
}
|
||||
],
|
||||
"product_status": {
|
||||
"under_investigation": ["CSAFPID_0001"]
|
||||
},
|
||||
"threats": [
|
||||
{
|
||||
"category": "impact",
|
||||
"details": "Still under investigation",
|
||||
"date": "2020-01-01T00:00:00Z",
|
||||
"product_ids": ["CSAFPID_0001"]
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
7
testdata/simple-directory-provider/white/avendor-advisory-0004.json.asc
vendored
Normal file
7
testdata/simple-directory-provider/white/avendor-advisory-0004.json.asc
vendored
Normal file
|
|
@ -0,0 +1,7 @@
|
|||
-----BEGIN PGP SIGNATURE-----
|
||||
|
||||
iHUEABYKAB0WIQSokUyi8RE5xqaaABj7PNmxXeYVlgUCZukv9QAKCRD7PNmxXeYV
|
||||
ljq0AP9n/rTgoNCJzSTZzNrrMy28ZR+Ppp1MSPWGFUzsx6qLJgD/d8cu0lokMsXf
|
||||
y0uc9k7hrla/ajFUzNt3AVvT+CPFtAo=
|
||||
=7E66
|
||||
-----END PGP SIGNATURE-----
|
||||
1
testdata/simple-directory-provider/white/avendor-advisory-0004.json.sha256
vendored
Normal file
1
testdata/simple-directory-provider/white/avendor-advisory-0004.json.sha256
vendored
Normal file
|
|
@ -0,0 +1 @@
|
|||
cb263bf1beab18b893de63f2966d0d8c5f38d60101c24d3fd7a5feebaad02c3b avendor-advisory-0004.json
|
||||
1
testdata/simple-directory-provider/white/avendor-advisory-0004.json.sha512
vendored
Normal file
1
testdata/simple-directory-provider/white/avendor-advisory-0004.json.sha512
vendored
Normal file
|
|
@ -0,0 +1 @@
|
|||
39476e1d08a0871d166091c90de259544382a3599eebda118a93468499a30fd034286086c461a97d3d5298e093b0be3868e8d89d8a6a255c4aa6adb81ebbfcad avendor-advisory-0004.json
|
||||
1
testdata/simple-directory-provider/white/changes.csv
vendored
Normal file
1
testdata/simple-directory-provider/white/changes.csv
vendored
Normal file
|
|
@ -0,0 +1 @@
|
|||
"avendor-advisory-0004.json","2020-01-01T00:00:00+00:00"
|
||||
|
6
testdata/simple-directory-provider/white/index.html
vendored
Normal file
6
testdata/simple-directory-provider/white/index.html
vendored
Normal file
|
|
@ -0,0 +1,6 @@
|
|||
<!doctype html>
|
||||
<html>
|
||||
<body>
|
||||
<a href="./avendor-advisory-0004.json">avendor-advisory-0004</a>
|
||||
</body>
|
||||
</html>
|
||||
1
testdata/simple-directory-provider/white/index.txt
vendored
Normal file
1
testdata/simple-directory-provider/white/index.txt
vendored
Normal file
|
|
@ -0,0 +1 @@
|
|||
avendor-advisory-0004.json
|
||||
2
testdata/simple-rolie-provider/openpgp/info.txt
vendored
Normal file
2
testdata/simple-rolie-provider/openpgp/info.txt
vendored
Normal file
|
|
@ -0,0 +1,2 @@
|
|||
The GPG key was generated with no passphrase and this command:
|
||||
`gpg --default-new-key-algo "ed25519/cert,sign+cv25519/encr" --quick-generate-key security@example.com"`
|
||||
15
testdata/simple-rolie-provider/openpgp/privkey.asc
vendored
Normal file
15
testdata/simple-rolie-provider/openpgp/privkey.asc
vendored
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
-----BEGIN PGP PRIVATE KEY BLOCK-----
|
||||
|
||||
lFgEZtsQNxYJKwYBBAHaRw8BAQdASr3y4zW+4XGqUlvRJ7stRCUHv8HB4ZoMoTtU
|
||||
KLgnHr4AAQD5G5xy/yTN5b+lvV5Ahrbz1qOZ/wmKTieGOH9GZb6JwhHwtBRzZWN1
|
||||
cml0eUBleGFtcGxlLmNvbYiZBBMWCgBBFiEEqJFMovEROcammgAY+zzZsV3mFZYF
|
||||
AmbbEDcCGwMFCQWjmoAFCwkIBwICIgIGFQoJCAsCBBYCAwECHgcCF4AACgkQ+zzZ
|
||||
sV3mFZZskQEAg5Dttqm6TA7MtLxz7VSlklx95LQr9d5jm4jcOaqlGT0A/1mAAlUq
|
||||
SDySFGI6DFQLcaZaUd9Yl+1b0Icr0tUiOaQHnF0EZtsQNxIKKwYBBAGXVQEFAQEH
|
||||
QOTHP4FkopIGJMWXTYsaeQ1Dugd+yNYWB357vRYq6QsiAwEIBwAA/0RIazq1s8Oe
|
||||
23jvNaZGb/adDYnRrkCMXXTBKsuA6WOAEhKIeAQYFgoAIBYhBKiRTKLxETnGppoA
|
||||
GPs82bFd5hWWBQJm2xA3AhsMAAoJEPs82bFd5hWWDKABAOl+NoM6FBhKAvckUXDR
|
||||
MLZ4k778N4Vy9VHbectjRKj1AQCO3JOmON+U6/mjohXrc2bwzKzt2yGiLP2HMxDx
|
||||
uzMXBQ==
|
||||
=4XHC
|
||||
-----END PGP PRIVATE KEY BLOCK-----
|
||||
13
testdata/simple-rolie-provider/openpgp/pubkey.asc
vendored
Normal file
13
testdata/simple-rolie-provider/openpgp/pubkey.asc
vendored
Normal file
|
|
@ -0,0 +1,13 @@
|
|||
-----BEGIN PGP PUBLIC KEY BLOCK-----
|
||||
|
||||
mDMEZtsQNxYJKwYBBAHaRw8BAQdASr3y4zW+4XGqUlvRJ7stRCUHv8HB4ZoMoTtU
|
||||
KLgnHr60FHNlY3VyaXR5QGV4YW1wbGUuY29tiJkEExYKAEEWIQSokUyi8RE5xqaa
|
||||
ABj7PNmxXeYVlgUCZtsQNwIbAwUJBaOagAULCQgHAgIiAgYVCgkICwIEFgIDAQIe
|
||||
BwIXgAAKCRD7PNmxXeYVlmyRAQCDkO22qbpMDsy0vHPtVKWSXH3ktCv13mObiNw5
|
||||
qqUZPQD/WYACVSpIPJIUYjoMVAtxplpR31iX7VvQhyvS1SI5pAe4OARm2xA3Egor
|
||||
BgEEAZdVAQUBAQdA5Mc/gWSikgYkxZdNixp5DUO6B37I1hYHfnu9FirpCyIDAQgH
|
||||
iHgEGBYKACAWIQSokUyi8RE5xqaaABj7PNmxXeYVlgUCZtsQNwIbDAAKCRD7PNmx
|
||||
XeYVlgygAQDpfjaDOhQYSgL3JFFw0TC2eJO+/DeFcvVR23nLY0So9QEAjtyTpjjf
|
||||
lOv5o6IV63Nm8Mys7dshoiz9hzMQ8bszFwU=
|
||||
=rhGT
|
||||
-----END PGP PUBLIC KEY BLOCK-----
|
||||
33
testdata/simple-rolie-provider/provider-metadata.json
vendored
Normal file
33
testdata/simple-rolie-provider/provider-metadata.json
vendored
Normal file
|
|
@ -0,0 +1,33 @@
|
|||
{
|
||||
"canonical_url": "{{.URL}}/provider-metadata.json",
|
||||
"distributions": [
|
||||
{
|
||||
"rolie": {
|
||||
"feeds": [
|
||||
{
|
||||
"summary": "TLP:WHITE advisories",
|
||||
"tlp_label": "WHITE",
|
||||
"url": "{{.URL}}/white/white-feed.json"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
],
|
||||
"last_updated": "2020-01-01T00:00:00Z",
|
||||
"list_on_CSAF_aggregators": true,
|
||||
"metadata_version": "2.0",
|
||||
"mirror_on_CSAF_aggregators": true,
|
||||
"public_openpgp_keys": [
|
||||
{
|
||||
"fingerprint": "A8914CA2F11139C6A69A0018FB3CD9B15DE61596",
|
||||
"url": "{{.URL}}/openpgp/pubkey.asc"
|
||||
}
|
||||
],
|
||||
"publisher": {
|
||||
"category": "vendor",
|
||||
"name": "ACME Inc",
|
||||
"namespace": "https://example.com",
|
||||
"contact_details": "mailto:security@example.com"
|
||||
},
|
||||
"role": "csaf_trusted_provider"
|
||||
}
|
||||
2
testdata/simple-rolie-provider/security.txt
vendored
Normal file
2
testdata/simple-rolie-provider/security.txt
vendored
Normal file
|
|
@ -0,0 +1,2 @@
|
|||
CSAF: /provider-metadata.json
|
||||
|
||||
23
testdata/simple-rolie-provider/service.json
vendored
Normal file
23
testdata/simple-rolie-provider/service.json
vendored
Normal file
|
|
@ -0,0 +1,23 @@
|
|||
{
|
||||
"service": {
|
||||
"workspace": [
|
||||
{
|
||||
"title": "CSAF feeds",
|
||||
"collection": [
|
||||
{
|
||||
"title": "CSAF feed (TLP:WHITE)",
|
||||
"href": "/white/white-feed.json",
|
||||
"categories": {
|
||||
"category": [
|
||||
{
|
||||
"scheme": "urn:ietf:params:rolie:category:information-type",
|
||||
"term": "csaf"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
170
testdata/simple-rolie-provider/white/avendor-advisory-0004.json
vendored
Normal file
170
testdata/simple-rolie-provider/white/avendor-advisory-0004.json
vendored
Normal file
|
|
@ -0,0 +1,170 @@
|
|||
{
|
||||
"document": {
|
||||
"category": "csaf_vex",
|
||||
"csaf_version": "2.0",
|
||||
"distribution": {
|
||||
"tlp": {
|
||||
"label": "WHITE",
|
||||
"url": "https://www.first.org/tlp/v1/"
|
||||
}
|
||||
},
|
||||
"notes": [
|
||||
{
|
||||
"category": "summary",
|
||||
"title": "Test document summary",
|
||||
"text": "Auto generated test CSAF document"
|
||||
}
|
||||
],
|
||||
"publisher": {
|
||||
"category": "vendor",
|
||||
"name": "ACME Inc.",
|
||||
"namespace": "https://www.example.com"
|
||||
},
|
||||
"title": "Test CSAF document",
|
||||
"tracking": {
|
||||
"current_release_date": "2020-01-01T00:00:00Z",
|
||||
"generator": {
|
||||
"date": "2020-01-01T00:00:00Z",
|
||||
"engine": {
|
||||
"name": "csaf-tool",
|
||||
"version": "0.3.2"
|
||||
}
|
||||
},
|
||||
"id": "Avendor-advisory-0004",
|
||||
"initial_release_date": "2020-01-01T00:00:00Z",
|
||||
"revision_history": [
|
||||
{
|
||||
"date": "2020-01-01T00:00:00Z",
|
||||
"number": "1",
|
||||
"summary": "Initial version"
|
||||
}
|
||||
],
|
||||
"status": "final",
|
||||
"version": "1"
|
||||
}
|
||||
},
|
||||
"product_tree": {
|
||||
"branches": [
|
||||
{
|
||||
"category": "vendor",
|
||||
"name": "AVendor",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_name",
|
||||
"name": "product_1",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_version",
|
||||
"name": "1.1",
|
||||
"product": {
|
||||
"name": "AVendor product_1 1.1",
|
||||
"product_id": "CSAFPID_0001"
|
||||
}
|
||||
},
|
||||
{
|
||||
"category": "product_version",
|
||||
"name": "1.2",
|
||||
"product": {
|
||||
"name": "AVendor product_1 1.2",
|
||||
"product_id": "CSAFPID_0002"
|
||||
}
|
||||
},
|
||||
{
|
||||
"category": "product_version",
|
||||
"name": "2.0",
|
||||
"product": {
|
||||
"name": "AVendor product_1 2.0",
|
||||
"product_id": "CSAFPID_0003"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "vendor",
|
||||
"name": "AVendor1",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_name",
|
||||
"name": "product_2",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_version",
|
||||
"name": "1",
|
||||
"product": {
|
||||
"name": "AVendor1 product_2 1",
|
||||
"product_id": "CSAFPID_0004"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"category": "vendor",
|
||||
"name": "AVendor",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_name",
|
||||
"name": "product_3",
|
||||
"branches": [
|
||||
{
|
||||
"category": "product_version",
|
||||
"name": "2022H2",
|
||||
"product": {
|
||||
"name": "AVendor product_3 2022H2",
|
||||
"product_id": "CSAFPID_0005"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
"vulnerabilities": [
|
||||
{
|
||||
"cve": "CVE-2020-1234",
|
||||
"notes": [
|
||||
{
|
||||
"category": "description",
|
||||
"title": "CVE description",
|
||||
"text": "https://nvd.nist.gov/vuln/detail/CVE-2020-1234"
|
||||
}
|
||||
],
|
||||
"product_status": {
|
||||
"under_investigation": ["CSAFPID_0001"]
|
||||
},
|
||||
"threats": [
|
||||
{
|
||||
"category": "impact",
|
||||
"details": "Customers should upgrade to the latest version of the product",
|
||||
"date": "2020-01-01T00:00:00Z",
|
||||
"product_ids": ["CSAFPID_0001"]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"cve": "CVE-2020-9876",
|
||||
"notes": [
|
||||
{
|
||||
"category": "description",
|
||||
"title": "CVE description",
|
||||
"text": "https://nvd.nist.gov/vuln/detail/CVE-2020-9876"
|
||||
}
|
||||
],
|
||||
"product_status": {
|
||||
"under_investigation": ["CSAFPID_0001"]
|
||||
},
|
||||
"threats": [
|
||||
{
|
||||
"category": "impact",
|
||||
"details": "Still under investigation",
|
||||
"date": "2020-01-01T00:00:00Z",
|
||||
"product_ids": ["CSAFPID_0001"]
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
7
testdata/simple-rolie-provider/white/avendor-advisory-0004.json.asc
vendored
Normal file
7
testdata/simple-rolie-provider/white/avendor-advisory-0004.json.asc
vendored
Normal file
|
|
@ -0,0 +1,7 @@
|
|||
-----BEGIN PGP SIGNATURE-----
|
||||
|
||||
iHUEABYKAB0WIQSokUyi8RE5xqaaABj7PNmxXeYVlgUCZukv9QAKCRD7PNmxXeYV
|
||||
ljq0AP9n/rTgoNCJzSTZzNrrMy28ZR+Ppp1MSPWGFUzsx6qLJgD/d8cu0lokMsXf
|
||||
y0uc9k7hrla/ajFUzNt3AVvT+CPFtAo=
|
||||
=7E66
|
||||
-----END PGP SIGNATURE-----
|
||||
1
testdata/simple-rolie-provider/white/avendor-advisory-0004.json.sha256
vendored
Normal file
1
testdata/simple-rolie-provider/white/avendor-advisory-0004.json.sha256
vendored
Normal file
|
|
@ -0,0 +1 @@
|
|||
cb263bf1beab18b893de63f2966d0d8c5f38d60101c24d3fd7a5feebaad02c3b avendor-advisory-0004.json
|
||||
1
testdata/simple-rolie-provider/white/avendor-advisory-0004.json.sha512
vendored
Normal file
1
testdata/simple-rolie-provider/white/avendor-advisory-0004.json.sha512
vendored
Normal file
|
|
@ -0,0 +1 @@
|
|||
39476e1d08a0871d166091c90de259544382a3599eebda118a93468499a30fd034286086c461a97d3d5298e093b0be3868e8d89d8a6a255c4aa6adb81ebbfcad avendor-advisory-0004.json
|
||||
61
testdata/simple-rolie-provider/white/white-feed.json
vendored
Normal file
61
testdata/simple-rolie-provider/white/white-feed.json
vendored
Normal file
|
|
@ -0,0 +1,61 @@
|
|||
{
|
||||
"feed": {
|
||||
"id": "csaf-feed-tlp-white",
|
||||
"title": "CSAF feed (TLP:WHITE)",
|
||||
"link": [
|
||||
{
|
||||
"rel": "self",
|
||||
"href": "/white/csaf-feed-tlp-white.json"
|
||||
},
|
||||
{
|
||||
"rel": "service",
|
||||
"href": "/service.json"
|
||||
}
|
||||
],
|
||||
"category": [
|
||||
{
|
||||
"scheme": "urn:ietf:params:rolie:category:information-type",
|
||||
"term": "csaf"
|
||||
}
|
||||
],
|
||||
"updated": "2020-01-01T00:00:00Z",
|
||||
"entry": [
|
||||
{
|
||||
"id": "Avendor-advisory-0004",
|
||||
"title": "Test CSAF document",
|
||||
"link": [
|
||||
{
|
||||
"rel": "self",
|
||||
"href": "/white/avendor-advisory-0004.json"
|
||||
},
|
||||
{{if .EnableSha256}}
|
||||
{
|
||||
"rel": "hash",
|
||||
"href": "/white/avendor-advisory-0004.json.sha256"
|
||||
},
|
||||
{{end}}
|
||||
{{if .EnableSha512}}
|
||||
{
|
||||
"rel": "hash",
|
||||
"href": "/white/avendor-advisory-0004.json.sha512"
|
||||
},
|
||||
{{end}}
|
||||
{
|
||||
"rel": "signature",
|
||||
"href": "/white/avendor-advisory-0004.json.asc"
|
||||
}
|
||||
],
|
||||
"published": "2020-01-01T00:00:00Z",
|
||||
"updated": "2020-01-01T00:00:00Z",
|
||||
"content": {
|
||||
"type": "application/json",
|
||||
"src": "/avendor-advisory-0004.json"
|
||||
},
|
||||
"format": {
|
||||
"schema": "https://docs.oasis-open.org/csaf/csaf/v2.0/csaf_json_schema.json",
|
||||
"version": "2.0"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue