Comments (6)
bernhardreiter
commented on July 22, 2024
@JanHoefelmeyer please test if our finding algorithm finds the legacy /security.txt without the wellknown part.
from csaf_distribution.
tschmidtb51
commented on July 22, 2024
From staring at the code at
csaf_distribution/csaf/providermetaloader.go
Line 122 in 65fae93
This is the wrong line. You wanted to mention:
csaf_distribution/csaf/providermetaloader.go
Line 135 in 65fae93
from csaf_distribution.
bernhardreiter
commented on July 22, 2024
This is the wrong line. You wanted to mention
Yes, thank you! I've corrected the main text above, so it reads better.
from csaf_distribution.
tschmidtb51
commented on July 22, 2024
From my tests, I also reach the conclusion that the legacy path is not evaluated.
from csaf_distribution.
bernhardreiter
commented on July 22, 2024
I also reach the conclusion that the legacy path is not evaluated.
Thanks for the confirmation, so the defect is confirmed. I keep the label "enhancement" because it currently is not in scope for running contracts.
from csaf_distribution.
s-l-teichmann
commented on July 22, 2024
Even if this is not part of a current contract I would opt to review and merge #506 before the final v3.
from csaf_distribution.
Related Issues (20)
- Consuming CSAF model from go v1.20 projects HOT 8
- `csaf_downloader` subfolder option not correct HOT 1
- Release 3.0.0 or 3.0.0-rc.2 HOT 1
- Time filtered advisory downloads should use the update instead of the publish date. HOT 2
- Print provider-metadata.json files per domain HOT 3
- Improve SHA* requests for downloader HOT 3
- CSAF checker: mixing domains, failing validations HOT 12
- Increase coverage to 75% HOT 6
- Make reuse conform
- Clarify if old sigs with expired keys can be okay
- changes.csv: check quoting HOT 2
- Change License to Apache 2.0 HOT 4
- Proposal: Extracting code from `main` packages into `server` and `client` packages
- Licensing of generated files HOT 3
- Improve logging for `csaf_aggregator` when no config file is present HOT 1
- Complete transition to structured logging for aggregator
- Some error messages from loading `provider-metadata.json` are dropped HOT 2
- Race condition on csaf_downloader HOT 1
- Release next minor version (3.1.0)
- Release first pre-release version
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from csaf_distribution.