-
Notifications
You must be signed in to change notification settings - Fork 9
#199 informative tests csaf2 1 6.3.1 #233
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
#199 informative tests csaf2 1 6.3.1 #233
Conversation
Coverage after merging feat/199-Informative-Tests_CSAF2_1_6.3.1 into main
Coverage Report
|
1ed185a
to
a5fceae
Compare
a5fceae
to
5b22d03
Compare
Coverage after merging feat/199-Informative-Tests_CSAF2_1_6.3.1 into 196-csaf-2.1
Coverage Report |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I might be wrong but how do you cover:
The test SHALL pass if a second scoring object is available regarding the specific product.
I opened oasis-tcs/csaf#928 for this
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I just checked. This is not covered yet:
{
"metrics": [
{
"content": {
"cvss_v2": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:N",
"baseScore": 5.5
}
},
"products": [
"CSAFPID-9080700"
]
},
{
"content": {
"cvss_v3": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM"
}
},
"products": [
"CSAFPID-9080700"
]
}
]
},
5b22d03
to
b340de9
Compare
Coverage after merging feat/199-Informative-Tests_CSAF2_1_6.3.1 into 196-csaf-2.1
Coverage Report |
Now the second scoring object is handled |
@rainer-exxcellent Can you rebase this? I updated the csaf 2.1 branch. |
b340de9
to
854587f
Compare
Coverage after merging feat/199-Informative-Tests_CSAF2_1_6.3.1 into 196-csaf-2.1
Coverage Report |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGETM
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
BTW: SSVC might also be an alternative system...
Coverage after merging feat/199-Informative-Tests_CSAF2_1_6.3.1 into 196-csaf-2.1
Coverage Report
|
5e9e00a
to
e74a43f
Compare
Coverage after merging feat/199-Informative-Tests_CSAF2_1_6.3.1 into 196-csaf-2.1
Coverage Report
|
….0 to CSAF 2.1
….0 to CSAF 2.1 - rebase
…relevant documents'
….0 to CSAF 2.1
e74a43f
to
f6cf58f
Compare
Coverage after merging feat/199-Informative-Tests_CSAF2_1_6.3.1 into 196-csaf-2.1
Coverage Report
|
Coverage after merging feat/199-Informative-Tests_CSAF2_1_6.3.1 into 196-csaf-2.1
Coverage Report
|
#199 copy and adapt mandatory test 6.3.1 from CSAF 2.0 to CSAF 2.1