https://github.com/sthagen/csaf-lint
Experimental CSAF envelope and body profile validator.
https://github.com/sthagen/csaf-lint
body csaf cvrf envelope lint profile
Last synced: about 2 months ago
JSON representation
Experimental CSAF envelope and body profile validator.
- Host: GitHub
- URL: https://github.com/sthagen/csaf-lint
- Owner: sthagen
- License: mit
- Created: 2021-03-07T07:20:23.000Z (about 5 years ago)
- Default Branch: default
- Last Pushed: 2026-04-04T10:43:39.000Z (2 months ago)
- Last Synced: 2026-04-04T11:29:39.707Z (2 months ago)
- Topics: body, csaf, cvrf, envelope, lint, profile
- Language: Python
- Homepage: https://codes.dilettant.life/docs/csaf-lint/
- Size: 5.04 MB
- Stars: 3
- Watchers: 1
- Forks: 0
- Open Issues: 19
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Security: SECURITY.md
- Support: SUPPORT.md
Awesome Lists containing this project
README
# CSAF Lint
Experimental CSAF envelope and body profile validator.
[](https://git.sr.ht/~sthagen/csaf-lint/tree/default/item/LICENSE)
[](https://git.sr.ht/~sthagen/csaf-lint/tree/default/item/COUNTRY-OF-ORIGIN)
[](https://git.sr.ht/~sthagen/csaf-lint/tree/default/item/EXPORT-CONTROL-CLASSIFICATION-NUMBER)
[](https://git.sr.ht/~sthagen/csaf-lint/tree/default/item/docs/third-party/README.md)
[](https://pypi.python.org/pypi/csaf-lint/)
[](https://pepy.tech/project/csaf-lint)
[](https://pypi.python.org/pypi/csaf-lint/)
[](https://git.sr.ht/~sthagen/csaf-lint/log)
In short: The current version of the `csaf-lint` validates documents in various
Common Security Advisory Framework (CSAF) formats against built-in or user custom schema files.
The supported versions are:
* CSAF 2.0 (default is now the 2021.03.23 editor version)
* CSAF 1.2 (aka CVRF 1.2)
* CSAF 1.1 (aka CVRF 1.1)
## Caveat Emptor
1. Expect changes to the CSAF v2.0 support because the underlying OASIS specification
is undergoing development by the members of the OASIS technical committee.
This may lead to breaking changes until the standard is published on
committee specification level.
The current supported draft JSON Schema versions are from 2021-03-23, 2021-03-19, and 2021-03-07.
2. The previous versions namely CVRF 1.1 and 1.2 were in XML format.
3. The current version CSAF 2.0-candidates are in JSON Schema format.
Available on [PyPI as csaf-lint](https://pypi.org/project/csaf-lint/)
## Installing
Recommended installation of current experimental package:
```console
❯ python -m pipx install csaf-lint
```
## Bug Tracker
Any feature requests or bug reports shall go to the [todos of csaf-lint](https://todo.sr.ht/~sthagen/csaf-lint).
## Primary Source repository
The main source of `csaf-lint` is on a mountain in central Switzerland.
We use distributed version control (git).
There is no central hub.
Every clone can become a new source for the benefit of all.
The preferred public clone of `csaf-lint` is:
* [at sourcehut](https://git.sr.ht/~sthagen/csaf-lint) - a collection of tools useful for software development.
## Contributions
Please do not submit "pull requests".
If you like to share small changes under the repositories license please kindly do so by sending a patchset.
You can either send such a patchset per email using [git send-email](https://git-send-email.io) or
if you are a sourcehut user by selecting "Prepare a patchset" on the summary page of your fork at [sourcehut](https://git.sr.ht/).
## Support
Please kindly submit issues at https://todo.sr.ht/~sthagen/csaf-lint or write plain text email to ~sthagen/csaf-lint@lists.sr.ht to submit patches and request support. Thanks.
## Status
Experimental.
**Note**: The default branch is `default`.