Skip to content

feat(CSAF2.1): #455 update csaf 2.1. strict schema #467

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Oct 14, 2025
Merged

feat(CSAF2.1): #455 update csaf 2.1. strict schema #467

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
36 changes: 24 additions & 12 deletions csaf_2_1/schemaTests/csaf_2_1_strict/schema.js
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,10 @@
// created with: python ./csaf/csaf_2.1/test/generate_strict_schema.py ./csaf/csaf_2.1/json_schema/csaf.json > ./csaf_2_1/schemaTests/csaf_2_1_strict/schema.json
export default {
$id: 'https://docs.oasis-open.org/csaf/csaf/v2.1/schema/csaf.json?strict',
$schema: 'https://docs.oasis-open.org/csaf/csaf/v2.1/schema/meta.json',
additionalProperties: false,
description:
'Representation of security advisory information as a JSON document.',
$defs: {
acknowledgments_t: {
description: 'Contains a list of acknowledgment elements.',
Expand Down Expand Up @@ -131,7 +137,7 @@ export default {
properties: {
name: {
description:
'The value should be the product\u2019s full canonical name, including version number and other attributes, as it would be used in a human-friendly document.',
'The value should be the product\u00e2\u20ac\u2122s full canonical name, including version number and other attributes, as it would be used in a human-friendly document.',
examples: [
'Cisco AnyConnect Secure Mobility Client 2.3.185',
'Microsoft Host Integration Server 2006 Service Pack 1',
Expand Down Expand Up @@ -500,11 +506,6 @@ export default {
type: 'string',
},
},
$id: 'https://docs.oasis-open.org/csaf/csaf/v2.1/schema/csaf.json?strict',
$schema: 'https://docs.oasis-open.org/csaf/csaf/v2.1/schema/meta.json',
additionalProperties: false,
description:
'Representation of security advisory information as a JSON document.',
properties: {
$schema: {
description:
Expand All @@ -528,7 +529,7 @@ export default {
aggregate_severity: {
additionalProperties: false,
description:
"Is a vehicle that is provided by the document producer to convey the urgency and criticality with which the one or more vulnerabilities reported should be addressed. It is a document-level metric and applied to the document as a whole \u2014 not any specific vulnerability. The range of values in this field is defined according to the document producer's policies and procedures.",
"Is a vehicle that is provided by the document producer to convey the urgency and criticality with which the one or more vulnerabilities reported should be addressed. It is a document-level metric and applied to the document as a whole \u00e2\u20ac\u201d not any specific vulnerability. The range of values in this field is defined according to the document producer's policies and procedures.",
properties: {
namespace: {
description: 'Points to the namespace so referenced.',
Expand Down Expand Up @@ -651,7 +652,7 @@ export default {
},
},
required: ['tlp'],
title: 'Rules for sharing document',
title: 'Rules for document sharing',
type: 'object',
},
lang: {
Expand Down Expand Up @@ -1316,6 +1317,7 @@ export default {
properties: {
cvss_v2: {
$ref: 'https://www.first.org/cvss/cvss-v2.0.json',
title: 'CVSS v2',
},
cvss_v3: {
oneOf: [
Expand All @@ -1326,9 +1328,11 @@ export default {
$ref: 'https://www.first.org/cvss/cvss-v3.1.json',
},
],
title: 'CVSS v3',
},
cvss_v4: {
$ref: 'https://www.first.org/cvss/cvss-v4.0.json',
$ref: 'https://www.first.org/cvss/cvss-v4.0.1.json',
title: 'CVSS v4',
},
epss: {
additionalProperties: false,
Expand Down Expand Up @@ -1360,8 +1364,16 @@ export default {
title: 'EPSS',
type: 'object',
},
ssvc_v1: {
$ref: 'https://certcc.github.io/SSVC/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json',
qualitative_severity_rating: {
description:
'Contains an assessment of the severity of the vulnerability regarding the products on a qualitative scale.',
enum: ['critical', 'high', 'low', 'medium', 'none'],
title: 'Qualitative Severity Rating',
type: 'string',
},
ssvc_v2: {
$ref: 'https://certcc.github.io/SSVC/data/schema/v2/Decision_Point_Value_Selection-2-0-0.schema.json',
title: 'SSVC v2',
},
},
title: 'Content',
Expand Down Expand Up @@ -1520,7 +1532,7 @@ export default {
restart_required: {
additionalProperties: false,
description:
'Provides information on category of restart is required by this remediation to become effective.',
'Provides information on the category of restart required by this remediation to become effective.',
properties: {
category: {
description:
Expand Down