-
Notifications
You must be signed in to change notification settings - Fork 9
fix: add optional test 6.2.37 #292
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
Coverage after merging 196-csaf-2.1_optional_test_6.2.37 into 196-csaf-2.1
Coverage Report
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
…ecommended-tests Feat/286 rename optional 2 recommended tests
… error path, add comments
…onsistent with CVSS31
…id vector-string clears all fields'
…to the cvss 4.0 JSON Schema
…erties in inputSchema
…6.1.9 feat(CSAF2.1): #197 copy and adapt mandatory test 6.1.9 from CSAF 2.0…
a9bc602
to
1a1f0ed
Compare
Coverage after merging 196-csaf-2.1_optional_test_6.2.37 into 196-csaf-2.1
Coverage Report
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
We should coordinate the message Mr tschmidtb51
const role = metric.content.ssvc_v1.role | ||
if (!registeredSsvcRoles.includes(role)) { | ||
context.warnings.push({ | ||
message: `The used role "${role}" is not a registered role`, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Perhaps we should list here the 3 possibles roles
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
message: `The used role "${role}" is not a registered role`, | |
message: `The used role "${role}" is not registered`, |
vulnerabilities: { | ||
elements: { | ||
additionalProperties: true, | ||
properties: { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We (@domachine and I) decided to us a lighter approach using optionalProperties
. (Applies to all array items.)
const role = metric.content.ssvc_v1.role | ||
if (!registeredSsvcRoles.includes(role)) { | ||
context.warnings.push({ | ||
message: `The used role "${role}" is not a registered role`, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
message: `The used role "${role}" is not a registered role`, | |
message: `The used role "${role}" is not registered`, |
The base branch was changed.
see oasis-tcs/csaf#1021