labels in report SDO about cti-python-stix2 HOT 4 CLOSED

Unfortunately not; empty lists are not allowed (Section 1, Part 2.8):

Empty lists are prohibited in STIX and MUST NOT be used as a substitute for omitting the
property if it is optional. If the property is required, the list MUST be present and MUST
have at least one value.

from cti-python-stix2.

This library is intended to adhere to the standard as written and make it hard to produce spec-invalid content. Part 1, Section 6.8 says the report label is intended to describe the primary purpose or subject of a report. It's an open vocabulary, so you don't have to use the values suggested in the spec. Perhaps there is something other than an empty string you could use to describe the report's purpose?

You could also bring this up on the CTI TC mailing list or Slack channel. Others there would be able to give you more background on the reasoning behind making it required.

from cti-python-stix2.

According to the specification the label property is required, but it is not stated that a value has to be set. The only additional thing defined is that a value from the supplied ov SHOULD be used. Wouldn't an empty list be in the spirit of the specification?

from cti-python-stix2.

As was noted on Slack, you can use threat-report as the generic fallback option for a report label.

I'm going to close this issue, but feel free to re-open it if you think it has not been resolved. Thank you for your questions!

from cti-python-stix2.