Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Editor revision for TC meeting 2024-05-29 #741

Merged
merged 67 commits into from
Jun 26, 2024
Merged

Editor revision for TC meeting 2024-05-29 #741

merged 67 commits into from
Jun 26, 2024

Conversation

tschmidtb51
Copy link
Contributor

@tschmidtb51 tschmidtb51 commented May 27, 2024 •
edited
Loading

tschmidtb51 added 23 commits May 23, 2024 21:37
@tschmidtb51
Editor Revision 2024-05-29
a48f303 
- update dates
- insert new revision for tracking
@tschmidtb51
TLP:CLEAR as Default
cfebd9d 
- resolves #721
- set TLP label `CLEAR` as default
- add reasoning
@tschmidtb51
CWE version
70afea3 
- addresses parts of #660
- add `version` as new required field to `cwe`
@tschmidtb51
CWE version
432d454 
- addresses parts of #660
- adopt prose to reflect schema
- add CSAF 2.0 to CSAF 2.1 conversion rule
- copy conversion rule to CVRF CSAF converter
@tschmidtb51
CWE version
5732616 
- addresses parts of #660
- adopt testdata to reflect current version of the schema
- adopt examples to reflect current version of the schema
@tschmidtb51
Merge pull request #733 from tschmidtb51/editor-revision-2024-05-29
1cae368 
Editor Revision 2024-05-29
@tschmidtb51
Merge pull request #734 from tschmidtb51/tlp
4d0ecb0 
`TLP:CLEAR` as default
@tschmidtb51
Same Timestamps
55eff27 
- resolves #628
- add `number` as second level sorting field in 6.1.16
- unify phrasing to match 6.1.14
@tschmidtb51
Same Timestamps
bc699c6 
- resolves #647
- add `number` as second level sorting field in 6.1.14
@tschmidtb51
CWE version
9e28312 
- addresses parts of #660
- add invalid examples for 6.1.11
- add valid examples for 6.1.11
- explicitly state in 6.1.11 that CWE Views and Categories are not valid
@tschmidtb51
CWE
bd53258 
- addresses parts of #154
- state explicit how to handle CWE categories and views
@tschmidtb51
CWEs
182f051 
- addresses parts of #530
- wrap CWE into a list to allow multiple CWEs per vulnerability
@tschmidtb51
CWEs
0af0785 
- addresses parts of #530, #154
- adopt prose to reflect schema
- remove conversion rule for CVRF CSAF converter
- reorder CVRF CSAF converter rules regarding CWEs
- clarify warning regarding conversion of CWE category and view
@tschmidtb51
CWEs
9dc1a49 
- addresses parts of #530
- adopt test 6.1.11 to reflect schema
@tschmidtb51
CWEs
64a22d1 
- addresses parts of #530
- adopt examples to reflect schema
- adopt testdata to reflect schema
@tschmidtb51
CWEs
d433431 
- addresses parts of #530, #660
- add `/vulnerabilities[]/cwes[]/version` to guidance on size
- add `/vulnerabilities[]/cwes` to guidance on size
- adopt pathes to match schema
@tschmidtb51
CWEs
4ae8d1d 
- addresses parts of #530
- add invalid example for 6.1.11
- add valid example for 6.1.11
@tschmidtb51
Editorial
2238f1a 
- correct comma mistake
@tschmidtb51
Editorial
abe8e93 
- add missing fact that involvements are a set
@tschmidtb51
CPE regex
53e9bce 
- addresses parts of #693
- add missing `\\` for overlooked `/`
- adopt prose to reflect schema
@tschmidtb51
CPE regex
16466ae 
- addresses parts of #693
- add new local testcases
@tschmidtb51
Merge pull request #736 from tschmidtb51/same-timestamps
26c7d58 
Same timestamps
@tschmidtb51
Merge pull request #739 from tschmidtb51/editorial-2024-05-29
37bf192 
Editorial 2024-05-29
@tschmidtb51 tschmidtb51 added the csaf 2.1 csaf 2.1 work label May 27, 2024
@tschmidtb51 tschmidtb51 self-assigned this May 27, 2024
@tschmidtb51
CWEs
6f5b64a 
- addresses review comment from #738
- clarify that invalid CWEs MUST omitted
- use RFC 2119 language
@tschmidtb51
CWEs
5908da1 
- addresses review comment from #738
- convert abbreviation back to singular (from plural)
@tschmidtb51
HTTP User-Agents
a552272 
- addresses parts of #635
- add new requirement explicitly stating that no blocking is allowed
@tschmidtb51
HTTP User-Agents
df33caa 
- addresses parts of review comments from #742
- change wording from MUST NOT to MUST (hopefully with same clarity)
- rephrase "white-listing" to exempt
- use new line per sentence
@tschmidtb51
Same Timestamps
70adeb9 
- resolves #627
- add optional test that warns if two timestamps in the revision history are the same
- add invalid examples for 6.2.21
- add valid examples for 6.2.21
- update testcase and schema for testcases
tschmidtb51 and others added 9 commits May 31, 2024 21:29
@tschmidtb51
Sort timestamps with timezones
7158738 
- addresses parts of #749
- clarify that timestamps might have different timezones
- add invalid example for 6.1.14
- add valid example for 6.1.14
@tschmidtb51
Sort timestamps with timezones
e06ce18 
- addresses parts of #749
- clarify that timestamps might have different timezones
- add invalid example for 6.1.16
- add valid example for 6.1.16
@tschmidtb51
Sort timestamps with timezones
f331687 
- addresses parts of #749
- clarify that timestamps might have different timezones
- add invalid example for 6.1.21
- add valid example for 6.1.21
@tschmidtb51
Sort timestamps with timezones
9404cda 
- addresses parts of #749, #341
- clarify that timestamps might have different timezones
- add invalid example for 6.2.5
- add valid examples for 6.2.5
@tschmidtb51
Sort timestamps with timezones
6d7329e 
- addresses parts of #749, #341
- clarify that timestamps might have different timezones
- add invalid example for 6.2.6
- add valid examples for 6.2.6
@tschmidtb51
Same Timestamps
ab3c9b2 
- addresses review comment from #744
- simplify requirement on comparison
@tschmidtb51
Multiplier
4049a91 
- addresses review comment of #747
- rephrase "separated" into "regrouped"
@tschmidtb51
Merge pull request #750 from tschmidtb51/timestamp-timezone-sorting
44bef84 
Clarify Timezones in multiple tests
@tschmidtb51 @mprpic
CWEs
5e3d2e9 
- addresses review comment from #738
- simplify the statement of ordered CWEs

Co-authored-by: Martin Prpič <[email protected]>
@tschmidtb51 tschmidtb51 added the call_to_action a call to action has been send out label May 31, 2024
santosomar and others added 8 commits June 10, 2024 22:29
@santosomar
Merge pull request #745 from tschmidtb51/rolie-location
a4f547e 
ROLIE category and service document location
@santosomar
Merge pull request #746 from tschmidtb51/branches-recursion-depth
eea00eb 
Branches recursion depth
@santosomar
Merge pull request #747 from tschmidtb51/party-multiplier
4861537 
Add party `multiplier`
@tschmidtb51
Merge pull request #742 from tschmidtb51/user-agent
f86388e 
HTTP User-Agents
@tschmidtb51
Merge remote-tracking branch 'upstream/editor-revision-2024-05-29' in…
06e1b0b 
…to cwe
@tschmidtb51
Merge remote-tracking branch 'upstream/editor-revision-2024-05-29' in…
e7cdef3 
…to same-timestamps
@tschmidtb51
Merge pull request #738 from tschmidtb51/cwe
40a2236 
CWEs, CWE version and CWE Weakness clarification
@tschmidtb51
Merge pull request #744 from tschmidtb51/same-timestamps
1f005f2 
Optional Test: Same Timestamps in Revision History
@tschmidtb51 tschmidtb51 changed the base branch from master to editor-revision-2024-04-24 June 17, 2024 21:30
@tschmidtb51 tschmidtb51 changed the base branch from editor-revision-2024-04-24 to master June 17, 2024 21:30
@tschmidtb51 tschmidtb51 marked this pull request as ready for review June 17, 2024 21:37
@tschmidtb51 tschmidtb51 added motion This item has a motion pending and removed call_to_action a call to action has been send out labels Jun 17, 2024
sthagen added 5 commits June 18, 2024 17:29
@sthagen
Naive and simple helper tool
4b51e70 
- adding new examples to counters require fresh inversion of mapping

Signed-off-by: Stefan Hagen <[email protected]>
@sthagen
Added updated section and example counter mappings
c2677c2 
Signed-off-by: Stefan Hagen <[email protected]>
@sthagen
Updated single markdown file delivery item
9dcc363 
Signed-off-by: Stefan Hagen <[email protected]>
@sthagen
Updated self-contained HTML file delivery item
1860709 
Signed-off-by: Stefan Hagen <[email protected]>
@sthagen
Updated self-contained HTML file (for real)
59b5621 
- Previous file still did neither have the injected styles nor the logo image as data

Signed-off-by: Stefan Hagen <[email protected]>
@tschmidtb51 tschmidtb51 removed the motion This item has a motion pending label Jun 26, 2024
@tschmidtb51 tschmidtb51 merged commit 7836bf6 into master Jun 26, 2024
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@sthagen sthagen sthagen approved these changes

Assignees

@tschmidtb51 tschmidtb51

Labels
csaf 2.1 csaf 2.1 work
Projects
None yet
Milestone
No milestone
3 participants
@tschmidtb51 @sthagen @santosomar