voteblake / csaf-rs Goto Github PK

View Code? Open in Web Editor NEW

0.0 0.0 4.0 111 KB

CSAF data types for Rust, building towards VEX support

License: MIT License

Rust 100.00%

csaf-rs's People

Contributors

Watchers

Forkers

lulf ctron trustification sthagen

csaf-rs's Issues

`typify` Investigation

https://crates.io/crates/typify - There were blockers last time I looked. Circle back and identify them.

Conform to Published Standard

Currently, we track an earlier WIP editor’s draft standard. The final version was released in November.

https://www.oasis-open.org/2022/11/28/common-security-advisory-framework-version-2-0-oasis-standard-is-now-published/

Hi! I was happy to find this crate and wanted to use it in my project. Are there any 'blockers' for releasing the 0.4.0 version of this crate? I need some of the functionality that has been added since 0.3.2

Implement Clone, and maybe PartialEq, Eq

In order to use this with Yew in a WebAssembly environment it would be necessary sometimes to clone the Csaf document. Also, it would be helpful in some cases to have PartialEq and Eq.

If you like, I can submit a PR for this.

Parsing a document might panic

Having a vector string with an unknown metric might panic. It should report an error instead:

You should not have been able to construct a cvss_json::Cvss3 except from a cvss::v3::Base which should always have a valid vector string: UnknownMetric { name: "E" }

I think the cause for this is:

csaf-rs/src/vulnerability.rs

Lines 216 to 221 in 76cb9ed

    
           impl From<Cvss3> for cvss::v3::Base { 
        
               fn from(b: Cvss3) -> Self { 
        
                   cvss::v3::Base::from_str(&b.vector_string) 
        
                   .expect("You should not have been able to construct a cvss_json::Cvss3 except from a cvss::v3::Base which should always have a valid vector string") 
        
               } 
        
           }

Upstream Validator

https://github.com/oasis-tcs/csaf/tree/master/csaf_2.0/test

Investigate integrating in local tests or recurring CI.

voteblake / csaf-rs Goto Github PK

csaf-rs's People

Contributors

Watchers

Forkers

csaf-rs's Issues

`typify` Investigation

Conform to Published Standard

Release 0.4.0

Implement Clone, and maybe PartialEq, Eq

Parsing a document might panic

Upstream Validator

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent

	impl From<Cvss3> for cvss::v3::Base {
	fn from(b: Cvss3) -> Self {
	cvss::v3::Base::from_str(&b.vector_string)
	.expect("You should not have been able to construct a cvss_json::Cvss3 except from a cvss::v3::Base which should always have a valid vector string")
	}
	}