Update integration test about csaf_distribution HOT 7 CLOSED

Analysing

There is one previous error message https://github.com/csaf-poc/csaf_distribution/actions/runs/4297499252/jobs/7490543962#step:4:159
here in context:

~/csaf_distribution ~/csaf_distribution/docs/scripts
/bin/bash: line 1: 1fef91e: value too great for base (error token is "1fef91e")
mkdir -p bin-linux-amd64/ 

which comes from setupProviderForITest.sh after the the pushd ../.. line, possibly from the Makefile.

from csaf_distribution.

The main problem comes up in setupValidationService.sh which install Nodejs 14 by calling:

curl -fsSL https://deb.nodesource.com/setup_14.x | sudo -E bash -

which is a problem as https://github.com/secvisogram/csaf-validator-service/blob/main/README.md lists >= 16 as requirement. So I'll fix that first.

from csaf_distribution.

An additional problem was that the apt cache was not updated. So depending on the github runner for the latest ubuntu image, it may or may not have had a current apt cache. This makes apt install gnutls-bin fail if there is a new version on the server, but the old version in the cache.

from csaf_distribution.

After those fixes in the branch, now it stops at
https://github.com/csaf-poc/csaf_distribution/actions/runs/4314860233/jobs/7528455402#step:5:811
with

2023/03/02 14:14:22 Looking for provider-metadata.json of 'localhost': https://localhost/.well-known/csaf/provider-metadata.json: Validating against JSON schema failed: jsonschema https://docs.oasis-open.org/csaf/csaf/v2.0/provider_json_schema.json compilation failed: no Loader found for https://www.first.org/cvss/cvss-v2.0.json

from csaf_distribution.

Turns out, a message like

/bin/bash: line 1: 1fef91e: value too great for base (error token is "1fef91e")

was there before and can be ignored. I've added a comment to the Makefile to describe the situation.
So it is over to @s-l-teichmann for looking deeper into the validation problem.

from csaf_distribution.

After those fixes in the branch, now it stops at https://github.com/csaf-poc/csaf_distribution/actions/runs/4314860233/jobs/7528455402#step:5:811 with

2023/03/02 14:14:22 Looking for provider-metadata.json of 'localhost': https://localhost/.well-known/csaf/provider-metadata.json: Validating against JSON schema failed: jsonschema https://docs.oasis-open.org/csaf/csaf/v2.0/provider_json_schema.json compilation failed: no Loader found for https://www.first.org/cvss/cvss-v2.0.json

Just to add my 5ct here:

I guess the important part is https://github.com/csaf-poc/csaf_distribution/actions/runs/4314860233/jobs/7528455402#step:5:813

provider_json_schema.json includes /properties/document/properties/publisher from csaf_json_schema.json which includes the CVSS schemes...

from csaf_distribution.

This one is resolved since a while and integration tests run fine.

from csaf_distribution.