Time filtered advisory downloads should use the update instead of the publish date. about csaf_distribution HOT 2 CLOSED

The use case is:
A security person wants to download only the updated advisories since the last download without missing any.

Because the elder versions of advisories have already be downloaded, I set up a regular job with an overlap in the time interval to be sure to catch all updates. So I save time and bandwidth.

Example:
Run the downloader every 24 hours trying to get advisories that have been updated in the last 25 hours or 24 hours and 10 minutes aka 2050 minutes to cater for some clock differences and delays in publication or starting the job.

from csaf_distribution.

PR #519 should solve this.

Remarks:

• The fallback to changes.csv as a filter is fine as these entries are generated from /document/tracking/current_release_date
• The PR removes filtering in the checker based on the year folder of the advisory as this folder is based on the publishing date.

from csaf_distribution.