Editor revision for TC meeting 2025-02-26 #885

tschmidtb51 · 2025-03-04T16:42:08Z

addresses parts of Include support for SSVC #803
fixes Clarify csaf.data.security.domain.ltd in Requirement 10: DNS path #831
fixes CWE link with multiple targets #870
fixes Correct default open serial_numbers and model_numbers #847
fixes Clarify terminology of initial release of document version in 3.1.11.1 Version Type - Integer versioning #791
fixes The field name 'release_date' is confusing, consider changing the name to 'public_date' #782
addresses parts of Simply datetime values (timestamps) by moving to RFC3339 #469
add invalid examples
add valid examples

- addresses parts of #803 - add SSVC decision point value selection 1.0.1 to schema - add SSVC decision point value selection 1.0.1 file into referenced schemas - adapt test scripts

- addresses parts of #803 - add SSVC link in informative references - mention SSVC in design consideration principles - add SSVC to metrics section

- addresses parts of #803 - update SSVC key in schema to align with CVSS

- addresses parts of #803 - update referenced SSVC schema to reflect change from CERTCC/SSVC#654 - reformat JSON schema

- addresses parts of #803 - update referenced SSVC schema

- addresses parts of #803 - add SSVC to guidance on size

- update dates - insert new revision for tracking

- resolves #831 - clarify text - add informative explanation

Seed Editor revision 2025-02-26

- addresses review comment from #868 - clarify that DNS resolves to IP address which has the webserver Co-authored-by: Stefan Hagen <[email protected]>

…to ssvc - resolve conflict in guidance-on-size.md by correct sorting

- addresses parts of #803 - update link as indicated by CERT/CC

- addresses parts of #803 - add conversion rule

- addresses parts of #803 - add mandatory test 6.1.43 to detect inconsistent SSVC IDs - add invalid examples - add valid examples

- addresses parts of #803 - add SSVC schema to testscript for test data

DNS Domain

- addresses parts of #803 - add mandatory test 6.1.44 for SSVC - add invalid examples - add valid examples

- addresses parts of #803 - correct that 6.1.43 and 6.1.44 just have a single relevant path, not multiple

- addresses parts of #803 - add mandatory test 6.1.45 for SSVC Decision Point Namespace - add invalid examples - add valid examples

Signed-off-by: Stefan Hagen <[email protected]>

- addresses parts of #803 - add informative test 6.3.13 for Non-Latest SSVC decision point version - add invalid example - add valid example

- addresses parts of #803 - add optional test 6.2.33 for unknown SSVC namespaces - add invalid example - add valid example

- addresses parts of #803 - improve wording by using registered namespaces instead of reserved

- addresses parts of #803 - add optional test 6.2.34 for unknown SSVC roles - add invalid example - add valid example

- addresses parts of #803 - update with latest developments from SSVC

- addresses parts of #847 - correct default open behavior of model and serial number

- addresses parts of #847 - clarify multiple `*` should be avoided - introduce escaping

- addresses parts of #847 - add conversion rules

- addresses review comment from #871 - unify formatting - sort list lexiographically

- addresses parts of #847 - tighten definition: prohibit multiple stars - adapt conversion rule

- addresses parts of #782 - add 6.1.45 to bind.txt

- addresses parts of #782 - add invalid timezone example for 6.1.45 - add valid timezone example for 6.1.45 - add invalid timezone example for 6.2.33 - add valid timezone example for 6.2.33

- addresses parts of #782, #469 - add invalid examples for 6.1.37 (leap second and year) - add valid examples for 6.1.37 (leap second and year)

- addresses parts of #469 - correct filename - exclude leap seconds files from testing - exclude invalid date-time format from testing

Disclosure date

- addresses parts of #803 - prepare merge from editor-revision-2025-02-26 - rename tests - adapt test data

…to ssvc

- addresses parts of #803 - update referenced schemas for SSVC

- addresses parts of #803 - adapt test 6.1.48 to reflect registered namespaces - add invalid examples for namespace `cvss` - add valid examples for namespace `cvss`

- addresses parts of #803 - add test 6.1.46 for invalid ssvc - add invalid examples - add valid examples

- addresses parts of #803 - add test 6.1.49 for inconsistent SSVC timestamp - add invalid examples - add valid examples

SSVC

csaf_2.1/prose/edit/src/conformance.md

Co-authored-by: tschmidtb51 <[email protected]>

Signed-off-by: Stefan Hagen <[email protected]>

- completed section mappings - completed example mappings - generated user facing derlivery items Signed-off-by: Stefan Hagen <[email protected]>

Co-authored-by: tschmidtb51 <[email protected]>

- included fix of a nit around key value semantics in json Signed-off-by: Stefan Hagen <[email protected]>

sthagen

LGTM - Ship it!

tschmidtb51 · 2025-03-04T22:46:06Z

A motion has been set by Thomas Schmidt: https://groups.oasis-open.org/discussion/motion-for-885

tschmidtb51 and others added 30 commits January 16, 2025 11:20

SSVC

68e5ca0

- addresses parts of #803 - add SSVC decision point value selection 1.0.1 to schema - add SSVC decision point value selection 1.0.1 file into referenced schemas - adapt test scripts

SSVC

4eecfc2

- addresses parts of #803 - add SSVC link in informative references - mention SSVC in design consideration principles - add SSVC to metrics section

SSVC

a38b394

- addresses parts of #803 - update SSVC key in schema to align with CVSS

SSVC

789785c

- addresses parts of #803 - update referenced SSVC schema to reflect change from CERTCC/SSVC#654 - reformat JSON schema

SSVC

599b150

- addresses parts of #803 - update referenced SSVC schema

SSVC

7ac9c47

- addresses parts of #803 - add SSVC to guidance on size

Seed Editor revision 2025-02-26

23556f3

- update dates - insert new revision for tracking

DNS Domain

a239382

- resolves #831 - clarify text - add informative explanation

Merge pull request #867 from tschmidtb51/editorial-2025-02-26

18a30ee

Seed Editor revision 2025-02-26

DNS Domain

7a9fae0

- addresses review comment from #868 - clarify that DNS resolves to IP address which has the webserver Co-authored-by: Stefan Hagen <[email protected]>

Merge remote-tracking branch 'upstream/editor-revision-2025-02-26' in…

c6889a5

…to ssvc - resolve conflict in guidance-on-size.md by correct sorting

SSVC

4d23886

- addresses parts of #803 - update link as indicated by CERT/CC

SSVC

4946309

- addresses parts of #803 - add conversion rule

SSVC

9762db1

- addresses parts of #803 - add mandatory test 6.1.43 to detect inconsistent SSVC IDs - add invalid examples - add valid examples

SSVC

1ec5b95

- addresses parts of #803 - add SSVC schema to testscript for test data

Merge pull request #868 from tschmidtb51/dns-domain

e53d883

DNS Domain

SSVC

07cfab1

- addresses parts of #803 - add mandatory test 6.1.44 for SSVC - add invalid examples - add valid examples

SSVC

cd9aabf

- addresses parts of #803 - correct that 6.1.43 and 6.1.44 just have a single relevant path, not multiple

SSVC

52f5d9b

- addresses parts of #803 - add mandatory test 6.1.45 for SSVC Decision Point Namespace - add invalid examples - add valid examples

Fixed CWE link with multiple targets #870

5029755

Signed-off-by: Stefan Hagen <[email protected]>

SSVC

1136122

- addresses parts of #803 - add informative test 6.3.13 for Non-Latest SSVC decision point version - add invalid example - add valid example

SSVC

95cc120

- addresses parts of #803 - add optional test 6.2.33 for unknown SSVC namespaces - add invalid example - add valid example

SSVC

946d25e

- addresses parts of #803 - improve wording by using registered namespaces instead of reserved

SSVC

7291d49

- addresses parts of #803 - add optional test 6.2.34 for unknown SSVC roles - add invalid example - add valid example

SSVC

e7f49c8

- addresses parts of #803 - update with latest developments from SSVC

Model and Serial Number

12e3f58

- addresses parts of #847 - correct default open behavior of model and serial number

Model and Serial Number

51b3efb

- addresses parts of #847 - clarify multiple `*` should be avoided - introduce escaping

Model and Serial Number

1421c2f

- addresses parts of #847 - add conversion rules

SSVC

674e64d

- addresses review comment from #871 - unify formatting - sort list lexiographically

Model and Serial Number

4c11d5e

- addresses parts of #847 - tighten definition: prohibit multiple stars - adapt conversion rule

tschmidtb51 and others added 16 commits February 28, 2025 19:27

Disclosure Date

62154b7

- addresses parts of #782 - add 6.1.45 to bind.txt

Disclosure Date

69eb92d

- addresses parts of #782 - add invalid timezone example for 6.1.45 - add valid timezone example for 6.1.45 - add invalid timezone example for 6.2.33 - add valid timezone example for 6.2.33

Disclosure Date

24109fd

- addresses parts of #782, #469 - add invalid examples for 6.1.37 (leap second and year) - add valid examples for 6.1.37 (leap second and year)

Daten and Time

c41d8f6

- addresses parts of #469 - correct filename - exclude leap seconds files from testing - exclude invalid date-time format from testing

Nit: More direct, closer to the format terms

db0cfa5

Nits: typo and varied speech

c4a03ae

Nit: Replaced not newer with earlier or equal to

c7a22c4

Nit: Replaced not newer with earlier or equal to

7e90404

Merge pull request #879 from tschmidtb51/disclosure_date

ab891f7

Disclosure date

SSVC

85aefd8

- addresses parts of #803 - prepare merge from editor-revision-2025-02-26 - rename tests - adapt test data

Merge remote-tracking branch 'upstream/editor-revision-2025-02-26' in…

f7fbb1f

…to ssvc

SSVC

4a421c3

- addresses parts of #803 - update referenced schemas for SSVC

SSVC

3d3ad6e

- addresses parts of #803 - adapt test 6.1.48 to reflect registered namespaces - add invalid examples for namespace `cvss` - add valid examples for namespace `cvss`

SSVC

789e037

- addresses parts of #803 - add test 6.1.46 for invalid ssvc - add invalid examples - add valid examples

SSVC

8e19dc4

- addresses parts of #803 - add test 6.1.49 for inconsistent SSVC timestamp - add invalid examples - add valid examples

Merge pull request #871 from tschmidtb51/ssvc

ac5052f

SSVC

tschmidtb51 added editor-revision already worked on in the editor revision csaf 2.1 csaf 2.1 work labels Mar 4, 2025

tschmidtb51 requested a review from sthagen March 4, 2025 16:42

tschmidtb51 self-assigned this Mar 4, 2025

tschmidtb51 commented Mar 4, 2025

View reviewed changes

csaf_2.1/prose/edit/src/conformance.md Outdated Show resolved Hide resolved

tschmidtb51 commented Mar 4, 2025

View reviewed changes

csaf_2.1/prose/edit/src/conformance.md Outdated Show resolved Hide resolved

sthagen and others added 5 commits March 4, 2025 17:56

Suggested from review feedback / dsicussions

11333d6

Co-authored-by: tschmidtb51 <[email protected]>

Fixed entry in the binder

5858221

Signed-off-by: Stefan Hagen <[email protected]>

Completed section and example mappings

39939b9

- completed section mappings - completed example mappings - generated user facing derlivery items Signed-off-by: Stefan Hagen <[email protected]>

Further review discussion results

f1d5bf3

Co-authored-by: tschmidtb51 <[email protected]>

Updated user facing delivery items

4d909c6

- included fix of a nit around key value semantics in json Signed-off-by: Stefan Hagen <[email protected]>

sthagen approved these changes Mar 4, 2025

View reviewed changes

tschmidtb51 added the motion This item has a motion pending label Mar 5, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Editor revision for TC meeting 2025-02-26 #885

Editor revision for TC meeting 2025-02-26 #885

tschmidtb51 commented Mar 4, 2025

sthagen left a comment

tschmidtb51 commented Mar 4, 2025

Editor revision for TC meeting 2025-02-26 #885

Are you sure you want to change the base?

Editor revision for TC meeting 2025-02-26 #885

Conversation

tschmidtb51 commented Mar 4, 2025

sthagen left a comment

Choose a reason for hiding this comment

tschmidtb51 commented Mar 4, 2025