Repository navigation
Add data in CSAF format from https://github.com/cisagov/CSAF #1315
Description
reported by @mjherzog
We should add data in CSAF format from https://github.com/cisagov/CSAF
Note:
- there may be several devices we may not care for in these data
- https://github.com/oasis-tcs/csaf supports both PURLs and VERS but that does not men that the CISA included them in their docs
See also:
Activity
tehami02 commentedon Oct 12, 2023
@pombredanne I think there are 1940 json files of CSAF data as its mentioned in their "index.txt" file. How do you want to add it to our project. Can you please provide more details.
aryangupta701 commentedon Jan 15, 2024
Hi @pombredanne can you please assign this issue to me, so I can start working on it
pombredanne commentedon Jan 15, 2024
@aryangupta701 we do not "assign" issues except for core team members :) ... You can just state here that you are working on it and this is enough for a start and thank you ++ for this BTW.
pombredanne commentedon Jan 15, 2024
@tehami02 re
We would import these CSAF data file as advisories, vulnerabilities and packages in our DB. That's the whole point of this issue.
aryangupta701 commentedon Jan 15, 2024
Okay I am working on this issue. Thank you
ambuj-1211 commentedon May 20, 2024
@ziadhany exactly what we need to do in this one, we have to make a simple importer or some kind of api, if api then what should be the endpoint?
ziadhany commentedon May 20, 2024
@ambuj-1211
I think we need to import CSFA data and also support the vulnerability CSAF format
ambuj-1211 commentedon Oct 22, 2024
@pombredanne https://github.com/cisagov/CSAF/blob/2d13147430a89f34a51f94f273247b313e4822d1/csaf_files/IT/white/2024/va-24-254-01.json#L88 have a look at this json file it has CSAFPID so how do we create purl out of the provided information.
https://www.ibm.com/support/pages/node/7167245 this URL was there in the references might help.
Add CISAGOV CSAF advisories importer
anishedu2234-coder commentedon Jul 26, 2026
Hi, I'm exploring this issue and working on a solution locally.
Add CSAF importer and unit tests aboutcode-org#1315