Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Editor revision for TC meeting 2024-05-29 #741

Merged
merged 67 commits into from
Jun 26, 2024

Conversation

tschmidtb51
Copy link
Contributor

@tschmidtb51 tschmidtb51 commented May 27, 2024

- update dates
- insert new revision for tracking
- resolves #721
- set TLP label `CLEAR` as default
- add reasoning
- addresses parts of #660
- add `version` as new required field to `cwe`
- addresses parts of #660
- adopt prose to reflect schema
- add CSAF 2.0 to CSAF 2.1 conversion rule
- copy conversion rule to CVRF CSAF converter
- addresses parts of #660
- adopt testdata to reflect current version of the schema
- adopt examples to reflect current version of the schema
- resolves #628
- add `number` as second level sorting field in 6.1.16
- unify phrasing to match 6.1.14
- resolves #647
- add `number` as second level sorting field in 6.1.14
- addresses parts of #660
- add invalid examples for 6.1.11
- add valid examples for 6.1.11
- explicitly state in 6.1.11 that CWE Views and Categories are not valid
- addresses parts of #154
- state explicit how to handle CWE categories and views
- addresses parts of #530
- wrap CWE into a list to allow multiple CWEs per vulnerability
- addresses parts of #530, #154
- adopt prose to reflect schema
- remove conversion rule for CVRF CSAF converter
- reorder CVRF CSAF converter rules regarding CWEs
- clarify warning regarding conversion of CWE category and view
- addresses parts of #530
- adopt test 6.1.11 to reflect schema
- addresses parts of #530
- adopt examples to reflect schema
- adopt testdata to reflect schema
- addresses parts of #530, #660
- add `/vulnerabilities[]/cwes[]/version` to guidance on size
- add `/vulnerabilities[]/cwes` to guidance on size
- adopt pathes to match schema
- addresses parts of #530
- add invalid example for 6.1.11
- add valid example for 6.1.11
- correct comma mistake
- add missing fact that involvements are a set
- addresses parts of #693
- add missing `\\` for overlooked `/`
- adopt prose to reflect schema
- addresses parts of #693
- add new local testcases
@tschmidtb51 tschmidtb51 added the csaf 2.1 csaf 2.1 work label May 27, 2024
@tschmidtb51 tschmidtb51 self-assigned this May 27, 2024
- addresses review comment from #738
- clarify that invalid CWEs MUST omitted
- use RFC 2119 language
- addresses review comment from #738
- convert abbreviation back to singular (from plural)
- addresses parts of #635
- add new requirement explicitly stating that no blocking is allowed
- addresses parts of review comments from #742
- change wording from MUST NOT to MUST (hopefully with same clarity)
- rephrase "white-listing" to exempt
- use new line per sentence
- resolves #627
- add optional test that warns if two timestamps in the revision history are the same
- add invalid examples for 6.2.21
- add valid examples for 6.2.21
- update testcase and schema for testcases
tschmidtb51 and others added 9 commits May 31, 2024 21:29
- addresses parts of #749
- clarify that timestamps might have different timezones
- add invalid example for 6.1.14
- add valid example for 6.1.14
- addresses parts of #749
- clarify that timestamps might have different timezones
- add invalid example for 6.1.16
- add valid example for 6.1.16
- addresses parts of #749
- clarify that timestamps might have different timezones
- add invalid example for 6.1.21
- add valid example for 6.1.21
- addresses parts of #749, #341
- clarify that timestamps might have different timezones
- add invalid example for 6.2.5
- add valid examples for 6.2.5
- addresses parts of #749, #341
- clarify that timestamps might have different timezones
- add invalid example for 6.2.6
- add valid examples for 6.2.6
- addresses review comment from #744
- simplify requirement on comparison
- addresses review comment of #747
- rephrase "separated" into "regrouped"
- addresses review comment from #738
- simplify the statement of ordered CWEs

Co-authored-by: Martin Prpič <martin.prpic@gmail.com>
@tschmidtb51 tschmidtb51 added the call_to_action a call to action has been send out label May 31, 2024
@tschmidtb51 tschmidtb51 changed the base branch from master to editor-revision-2024-04-24 June 17, 2024 21:30
@tschmidtb51 tschmidtb51 changed the base branch from editor-revision-2024-04-24 to master June 17, 2024 21:30
@tschmidtb51 tschmidtb51 marked this pull request as ready for review June 17, 2024 21:37
@tschmidtb51 tschmidtb51 added motion This item has a motion pending and removed call_to_action a call to action has been send out labels Jun 17, 2024
- adding new examples to counters require fresh inversion of mapping

Signed-off-by: Stefan Hagen <stefan@hagen.link>
Signed-off-by: Stefan Hagen <stefan@hagen.link>
Signed-off-by: Stefan Hagen <stefan@hagen.link>
Signed-off-by: Stefan Hagen <stefan@hagen.link>
- Previous file still did neither have the injected styles nor the logo image as data

Signed-off-by: Stefan Hagen <stefan@hagen.link>
@tschmidtb51 tschmidtb51 removed the motion This item has a motion pending label Jun 26, 2024
@tschmidtb51 tschmidtb51 merged commit 7836bf6 into master Jun 26, 2024
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
csaf 2.1 csaf 2.1 work
Projects
None yet
3 participants