1
0
Fork 0
mirror of https://github.com/gocsaf/csaf.git synced 2025-12-22 05:40:11 +01:00
Commit graph

1169 commits

Author SHA1 Message Date
Christoph Klassen
5a3661e81b use type FileHashValue 2023-09-08 14:52:48 +02:00
JanHoefelmeyer
3a7b411789 formatting 2023-09-08 13:34:45 +02:00
JanHoefelmeyer
daab24eb2f Corrected wrong error requirement 2023-09-08 13:26:38 +02:00
JanHoefelmeyer
2e129b9dc8 Clean up certs_test.go a bit 2023-09-08 11:00:50 +02:00
JanHoefelmeyer
a217f88ea1 Many unittests for internal folder 2023-09-08 09:40:41 +02:00
Christoph Klassen
dc41aae07f use up-to-date schema for CVSS 3.0 2023-09-07 08:48:34 +02:00
Christoph Klassen
4206c2e4b3 only using enums from CVSS 3.0 2023-09-06 15:51:47 +02:00
Christoph Klassen
b03df5508a added explanation for cvss3VectorStringPattern 2023-09-06 15:44:56 +02:00
Christoph Klassen
f45d273af9 fixed versionPattern 2023-09-05 19:53:48 +02:00
cintek
58bad8a6cf
Merge pull request #3 from s-l-teichmann/unexport-patterns
Unexport patterns
2023-09-05 19:47:32 +02:00
Sascha L. Teichmann
22ef2a925e Unexport patterns 2023-09-05 19:14:57 +02:00
Christoph Klassen
7f36ecb48c added missing types for CVSS2 + changed variable names for more consistency 2023-09-05 16:41:52 +02:00
Christoph Klassen
3acabdf73b reusing TLPLabel and Category from models.go 2023-09-04 17:41:44 +02:00
Christoph Klassen
4fc2fd9bf2 added omitempty for cvss structs 2023-09-04 16:06:47 +02:00
Christoph Klassen
f59a8cc7a9 use generated types 2023-09-04 15:58:28 +02:00
cintek
12d24647c6
Merge pull request #2 from s-l-teichmann/generate-cvss-enums
Add generator for CVSS enums
2023-09-04 15:10:48 +02:00
cintek
11c1a2cfbb
Merge pull request #1 from s-l-teichmann/close-load-advisory
Move defer f.Close to right position.
2023-09-04 15:10:22 +02:00
Sascha L. Teichmann
e821683423 Add generator for CVSS enums 2023-09-02 17:38:12 +02:00
Sascha L. Teichmann
96608a07fe Move defer.Close to right position. 2023-09-02 17:03:46 +02:00
Christoph Klassen
a1ea10baf9 feat: added model for a CSAF advisory 2023-09-01 20:14:18 +02:00
Sascha L. Teichmann
24151345f5
Drop time precision below seconds in log output. (#450) 2023-08-31 17:07:34 +02:00
Sascha L. Teichmann
018e0e55f7
Fix downloader logging docs and some comments. (#447) 2023-08-29 10:24:02 +02:00
Sascha L. Teichmann
5459f10d39
Downloader: Add structured logging, fails storing and statistics
* add  forwarding support in downloader

* Raise needed Go version to 1.21+ so slog can be used.

* Introduce validation mode flag (strict, unsafe)

* Add structured logging and place log into the download folder.

* Improve some code comment (bernhardreiter)

* Add counting stats to downloader.
2023-08-28 15:03:01 +02:00
Sascha L. Teichmann
e0475791ff
Downloader: Add forwarding to HTTP endpoint (#442)
* started with forwarding support in downloader

* Add missing files.

* Add missing files.

* Raise needed Go version

* More Go version bumping.

* Fix forwarding

* Go 1.21+ needed

* Make terminating forwarder more robust.

* Better var naming

* Remove dead code. Improve commentary.

* Prepare validation status adjustment.

* Move validations to functions to make them executable in a loop.

* Introduce validation mode flag (strict, unsafe)
2023-08-25 10:31:27 +02:00
Sascha L. Teichmann
4dfa2dd552 Dedup code a bit 2023-08-23 17:14:49 +02:00
JanHoefelmeyer
12815430ec Remove superflous reset of temporary variable 2023-08-23 13:22:28 +02:00
JanHoefelmeyer
8d51577e49 Use whereType for mistake 2023-08-23 12:58:40 +02:00
JanHoefelmeyer
4b56f3e837 Exchange slice with util.set for mistakes in checkMissing 2023-08-23 12:29:05 +02:00
JanHoefelmeyer
7651dc2a05 Sort missing files into errors 2023-08-23 11:40:37 +02:00
Sascha L. Teichmann
7d3c3a68df
Let aggregator look for config files in similiar places like the other tools. (#440) 2023-08-22 17:37:57 +02:00
Sascha L. Teichmann
f2657bb51a
uploader: use the TOML config file infrastructure, too. (#439)
* Make uploader use the TOML config file intrastructure, too.

* Improve method naming a bit.

* Improve method naming a bit.

* Add forgotten struct tags for TOML

* Add version to command line only parameters in uploader documentation

* Be explicit about supported options in config file.

* allow interactive flags in config file.

---------

Co-authored-by: JanHoefelmeyer <Jan Höfelmeyer jhoefelmeyer@intevation.de>
2023-08-22 17:17:06 +02:00
JanHoefelmeyer
5c935901ab
Make rolie or directory listing mandatory (#409)
* Changed infos to warnings and errors for Requirements 11-17 if said Requirements were not checked.

* Made a few more infos to warnings, slightly improved some messages in the reporters.

* Add explicite errors if badROLIEFeed and badFolders were not used.

---------

Co-authored-by: JanHoefelmeyer <hoefelmeyer.jan@gmail.com>
2023-08-19 10:59:37 +02:00
JanHoefelmeyer
824079899e
Error to explaining warning when loading lpmd messages in checker (#429)
* Error to explaining warning when loading lpmd messages in checker

* Remove TODO

---------

Co-authored-by: JanHoefelmeyer <hoefelmeyer.jan@gmail.com>
2023-08-18 11:29:30 +02:00
Sascha L. Teichmann
a153906d03
Document that client-passphrase option is experimental
* Label the option experimental and limited at all places.
 * Point to the downloader documentation as single point to write more.
 * Add more hints on how the old PEM block encryption is experimental
   and why it often shall not be used.
---------

Co-authored-by: JanHoefelmeyer <hoefelmeyer.jan@gmail.com>
Co-authored-by: Bernhard Reiter <bernhard@intevation.de>
2023-08-18 11:24:39 +02:00
Sascha L. Teichmann
79fbc2bcd8
Update dependencies 2023-08-18 11:22:14 +02:00
JanHoefelmeyer
bda7ade837
Fix script scripts/prepareUbuntuInstanceForITests.sh for new go.dev API
* Adapt finding the current go version to the new result of https://go.dev/VERSION\?m=text by using only the first line.


Co-authored-by: JanHoefelmeyer <hoefelmeyer.jan@gmail.com>
2023-08-17 20:17:15 +02:00
Sascha L. Teichmann
0b914f7e7a
Document regular expression syntax used for filtering URLs. (#433)
* Document regular expression syntax used for filtering URLs.

* Typo: describes -> described

* Forget to add aggregator doc

---------

Co-authored-by: JanHoefelmeyer <hoefelmeyer.jan@gmail.com>
2023-08-17 17:02:10 +02:00
Sascha L. Teichmann
d49049c3af
Aggregator: Add time range filtering 2023-08-17 16:54:11 +02:00
JanHoefelmeyer
42709a8554
Merge pull request #430 from csaf-poc/checker-remove-years-flag
Checker: remove years flag
2023-08-17 11:47:22 +02:00
Sascha L. Teichmann
4cd376a9ca Make revive happy. 2023-08-17 11:03:40 +02:00
Sascha L. Teichmann
468e91cb8b Remove the years flag from checker. 2023-08-17 11:01:45 +02:00
JanHoefelmeyer
f4d00cd9d8
Merge pull request #424 from csaf-poc/aggregator-client-certs
Aggregator: Add support for client certificates and extra header
2023-08-17 10:05:08 +02:00
JanHoefelmeyer
7a202ddfdc merge branch 'main' into 'aggregator-client-certs' 2023-08-17 09:53:01 +02:00
JanHoefelmeyer
bb09567771
Merge pull request #423 from csaf-poc/downloader-client-certs
Downloader: Add support for client certificates
2023-08-17 09:46:39 +02:00
JanHoefelmeyer
7a6cbd182c merge branch 'main' into checker-timerange-report 2023-08-17 09:35:52 +02:00
JanHoefelmeyer
8d381385b0
Merge pull request #422 from csaf-poc/checker-timerange-report
Checker: Add time range to report
2023-08-17 09:18:49 +02:00
Sascha L. Teichmann
7464ade6ae Fix merge conflict oversight in doc. 2023-08-16 20:29:25 +02:00
Sascha L. Teichmann
4c6fd5457f Merge branch 'main' into aggregator-client-certs 2023-08-16 20:23:49 +02:00
Sascha L. Teichmann
1e4c5d863d Merge branch 'main' into downloader-client-certs 2023-08-16 20:13:40 +02:00
Sascha L. Teichmann
9b684adae8 Merge branch 'main' into checker-timerange-report 2023-08-16 20:12:54 +02:00