1
0
Fork 0
mirror of https://github.com/gocsaf/csaf.git synced 2025-12-22 18:15:42 +01:00
Commit graph

630 commits

Author SHA1 Message Date
JanHoefelmeyer
3769f1d338
Add abilities to aggregator to mirror and list
* Aggregator now checks every provider on whether its mirrored or listed. 
*Add the option to the docs.
* Clean up the example  toml file to still contain two mirrors and one example-lister.

Co-authored-by: Jan Höfelmeyer <Jan Höfelmeyer jhoefelmeyer@intevation.de>
Co-authored-by: Sascha L. Teichmann <sascha.teichmann@intevation.de>
Co-authored-by: Bernhard Reiter <bernhard@intevation.de>
2022-07-21 17:59:58 +02:00
Sascha L. Teichmann
d1855a9c30
Improve checks and messages for bad entries in files
* Ignore bad URLs in index.txt, improve messages.

resolve #158
2022-07-21 17:11:46 +02:00
Bernhard Reiter
6a605fdbcc
Add checker hint about not yet using role 2022-07-21 16:31:22 +02:00
Bernhard Reiter
94fe738b8c
Fix testDownloader url 2022-07-21 16:25:12 +02:00
Bernhard Reiter
35c31e9a76
Improve integration test
* Add hint that some fails are okay, while we try to setup the
   validation service.
2022-07-21 16:22:02 +02:00
Bernhard Reiter
88a2d585be
Improve integration test scripts
* Add a simple aggegator web server config.
  * Add a downloader test using a direct url from the aggregator.
2022-07-21 16:16:16 +02:00
Jan Höfelmeyer
82feb18eef Exchanged error message if Decoder fails to point towards server logs 2022-07-21 15:54:46 +02:00
bernhardreiter bernhardreiter@users.noreply.github.com
d5b9aa9ce0 Apply automatic changes 2022-07-21 13:04:51 +00:00
JanHoefelmeyer
5716374eac
Move example location of config files to /etc
* Move example and integration test configuration files to /etc/csaf,
   this includes the provider's config.toml as well as the test OpenPGP keys.
   This shall make it more compatible with good practices like the FHS.

Co-authored-by: Jan Höfelmeyer <Jan Höfelmeyer jhoefelmeyer@intevation.de>
Co-authored-by: Bernhard Reiter <bernhard@intevation.de>
2022-07-21 15:04:09 +02:00
JanHoefelmeyer
a84afa35cd
improve error message for requirement 9 (#243)
* Improve phrasing to be more clear about that the test
  was not performed if we had found not provider-metadata.json.
2022-07-21 12:48:48 +02:00
Bernhard Reiter
7965917168
Improve doc for development test script setup
* Add a commented out hint how to clone a special branch
   in the calling example of docs/scripts/Readme.md.
2022-07-21 12:44:03 +02:00
JanHoefelmeyer
16ff06180c
Merge pull request #241 from csaf-poc/verbose-validation-downloader
Tested on version: 0.9.4-31-ga1d609c.
2022-07-21 09:20:36 +02:00
Sascha L. Teichmann
a1d609c7d8 when downloader is run with verbose flag the advisory validation issues are logged in detail. 2022-07-20 12:49:50 +02:00
s-l-teichmann s-l-teichmann@users.noreply.github.com
0375e22747 Apply automatic changes 2022-07-20 10:05:55 +00:00
Fadi Abbud
9bb65a8cf8
Include service/category documents in itests (#239) 2022-07-20 12:05:08 +02:00
JanHoefelmeyer
cca460c77b
Merge pull request #238 from csaf-poc/publisher-in-report
Added publisher and role to domain report.
2022-07-20 11:58:14 +02:00
Sascha L. Teichmann
3a43ca5630 Merge branch 'main' into publisher-in-report 2022-07-20 11:35:17 +02:00
Sascha L. Teichmann
6bf7b52890 Add fieldset araound publsher in html report 2022-07-20 11:35:04 +02:00
Sascha L. Teichmann
4c1fdd2289
simplified loading of provider metadata in case of dns fallback. (#240) 2022-07-19 16:14:56 +02:00
Fadi Abbud
6a87157184
Merge pull request #235 from csaf-poc/bad-dirs-only-once
Only report bad directories in listing check only once.
2022-07-19 12:51:29 +02:00
Fadi Abbud
798e11ad18
Merge pull request #234 from csaf-poc/quick-ckeck
Quick ckeck
2022-07-19 10:07:08 +02:00
Sascha L. Teichmann
649b5c904b Added publisher and role to domain report. 2022-07-18 22:44:34 +02:00
bernhardreiter bernhardreiter@users.noreply.github.com
5caed04dc8 Apply automatic changes 2022-07-18 18:16:39 +00:00
JanHoefelmeyer
e424cd3d6c
Improve provider documentation
* Creates an example config.toml and replaces csaf_providers example with the autodoc to said example.

Co-authored-by: Jan Höfelmeyer <Jan Höfelmeyer jhoefelmeyer@intevation.de>
Co-authored-by: Bernhard Reiter <bernhard@intevation.de>
Co-authored-by: @mfd2007
2022-07-18 20:15:45 +02:00
Sascha L. Teichmann
efa233f2ce Merge branch 'main' into quick-ckeck 2022-07-18 20:08:02 +02:00
Sascha L. Teichmann
86a015d6bf
Correct field order in changes.csv (#228) 2022-07-18 18:37:55 +02:00
bernhardreiter bernhardreiter@users.noreply.github.com
8e18b6f36f Apply automatic changes 2022-07-18 16:00:33 +00:00
Sascha L. Teichmann
8b57851486
Moved direct loading of pmd from downloader to library. (#233)
* Moved direct loading of pmd from downloader to library,
  so aggregator and checker gain the ability.
* Disabled some checks if we were given a direct PMD URL.
2022-07-18 17:59:38 +02:00
Sascha L. Teichmann
9cba4eec30
Improve joining of url paths in some situations
* Use url.JoinPath to join URLs from a few places.
* Add util/joinpath.go from go 1.19, add the license in REUSE 3.0 compatible manner.

resolve #223

Co-authored-by: Bernhard Reiter <bernhard@intevation.de>
2022-07-18 17:41:52 +02:00
Sascha L. Teichmann
332f0b2711 Only report bad directories in listing check only once. 2022-07-18 10:27:59 +02:00
Sascha L. Teichmann
7f113f1f30 Adjusted documentation 2022-07-17 15:01:15 +02:00
Sascha L. Teichmann
7e850f7a2f Apply date range filtering to changes.csv 2022-07-17 14:52:16 +02:00
Sascha L. Teichmann
8c53b4068b Filter ROLIE entries if we have a date range 2022-07-17 14:46:28 +02:00
Sascha L. Teichmann
b39553fc9a If using folder per year based date checks assume last second of 31 december 2022-07-17 14:35:37 +02:00
Sascha L. Teichmann
ec0548bef6 introduce quick check bases on folder year 2022-07-17 12:27:25 +02:00
Bernhard Reiter
324de3abca
Improve toplevel README.md regarding binaries
* Add downloader to the list of available windows binaries.
 * Improve phrasing about what is tested and where to get the binaries.
2022-07-15 09:53:49 +02:00
Omar Santos
0171715390
Correcting documentation (#229)
The title of the .md file should be csaf_downloader, not "uploader". Also added an introductory sentence.
2022-07-15 07:43:57 +02:00
JanHoefelmeyer
c00b8b37bb
Trimmed redirects (#230)
* Changes phrasing of redirects to be clearer. Now omits redirects if they are already listed as part of a larger redirect chain

* Rebuilt how the redirection string is built. Now checks for duplicate redirections after all redirections have been read

* Fixes intendation error

* Fixed redirect output.

* Fixed recording redirects.

Co-authored-by: Jan Höfelmeyer <Jan Höfelmeyer jhoefelmeyer@intevation.de>
Co-authored-by: Sascha L. Teichmann <sascha.teichmann@intevation.de>
2022-07-15 07:39:06 +02:00
Sascha L. Teichmann
56a047cdde
Fixed issues found by staticcheck. (#227) 2022-07-14 18:38:37 +02:00
JanHoefelmeyer
2ac7940206
Pwacc (#218)
* Adds option to require Client Certificate and a Password to aquire write access in provider

* Removed unnecessary flavourtext from provider markdown file

* Fixed and simplified the auth middleware

Co-authored-by: Jan Höfelmeyer <Jan Höfelmeyer jhoefelmeyer@intevation.de>
Co-authored-by: Sascha L. Teichmann <sascha.teichmann@intevation.de>
2022-07-13 14:09:27 +02:00
Sascha L. Teichmann
50024915f4
Update 3rd party libraries. (#217) 2022-07-13 08:48:16 +02:00
JanHoefelmeyer
46f79a9e24
Bailout unknown config (#216)
* provider now checks for undecoded config entries and returns an error if any are found

* Specific error message now in server logs, more general message for user

* Changes spaces to tabs for formatting consistency

* Further formatting

* Improved handling of undecoded TOML fields in config.

* aggregator now checks for not decoded config options

Co-authored-by: Jan Höfelmeyer <Jan Höfelmeyer jhoefelmeyer@intevation.de>
Co-authored-by: Sascha L. Teichmann <sascha.teichmann@intevation.de>
2022-07-12 14:07:12 +02:00
JanHoefelmeyer
cbb9c7a7a1
Added path to error if ROLIE feed is broken (#206)
* Added path to error if ROLIE feed is broken

* Adds missing quotation marks which broke string

* Adjust to usual error pattern.

Co-authored-by: Jan Höfelmeyer <Jan Höfelmeyer jhoefelmeyer@intevation.de>
Co-authored-by: Sascha L. Teichmann <sascha.teichmann@intevation.de>
2022-07-11 15:46:41 +02:00
JanHoefelmeyer
3ed1d3ab21
Rewrote confusing config option explanations in csaf_provider (#213)
Co-authored-by: Jan Höfelmeyer <Jan Höfelmeyer jhoefelmeyer@intevation.de>
2022-07-11 12:32:48 +02:00
JanHoefelmeyer
15f05fc122
Adds explanation of type returns of individual checkers to csaf_checker.md (#215)
Co-authored-by: Jan Höfelmeyer <Jan Höfelmeyer jhoefelmeyer@intevation.de>
2022-07-11 12:30:57 +02:00
JanHoefelmeyer
73e216eccc
reporters.go update (#211)
* updates phrasing of error message if processor does not check security.txt due to an earlier error

* Fixes typo in error message

Co-authored-by: Jan Höfelmeyer <Jan Höfelmeyer jhoefelmeyer@intevation.de>
2022-07-11 12:30:24 +02:00
Fadi Abbud
ff2eee39e5
Merge pull request #208 from csaf-poc/rolie-categories
Rolie categories
2022-07-08 11:43:12 +02:00
Fadi Abbud
12693409a8 Add example to provider documentation (categories) 2022-07-08 11:27:52 +02:00
Sascha L. Teichmann
f06aae9261 Fixed category-label.json name in provider/create 2022-07-08 11:24:55 +02:00
Sascha L. Teichmann
dc8c89c886 Merge branch 'main' into rolie-categories 2022-07-05 16:54:12 +02:00