Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Editor revision for TC meeting 2025-01-29 #861

Merged
merged 52 commits into from
Feb 14, 2025
Merged

Conversation

tschmidtb51
Copy link
Contributor

@tschmidtb51 tschmidtb51 commented Jan 29, 2025

mprpic and others added 30 commits December 3, 2024 14:18
This allows a vendor to specify multiple purl identifiers for a single
component (present as a product version branch in the product tree).
Multiple purls may identify the same component but point to different
locations from where that component may be available. Thus, it is mandatory
that if multiple purls are present in a single
product_identification_helper object, they must only differ in their
qualifiers. Otherwise they should be set up as different product
tree branches.
Support multiple purl identifiers in product_identification_helper
- addresses parts of #774
- assign new test number based on current master branch
- addresses parts of #774, #781, #693
- add `\\` to mask `/` (based on discussion in #693)
- addresses parts of #774, #781
- adapt prose to meet writing style and align with schema
- addresses parts of #774, #781
- sort list entries
- addresses parts of #774, #781, #341
- improve wording
- add valid example
- addresses parts of #774, #781, #341
- improve wording of 6.1.42
- move tests to testfiles
- add invalid examples
- add valid examples
- adapt test schema
- addresses parts of #774, #781, #341
- add valid example
- add invalid example for oci case (not namespace allowed)
- names and affiliations should match roster
- sorted lines
- update dates
- insert new revision for tracking
- addresses parts of #677
- add `last_updated` ROLIE section in PMD schema
- addresses parts of #677
- adapt examples to reflect change
- addresses parts of #817
- add section about hardware/software separation with example
- add full describe rule
- addresses parts of #817
- add optional test to detect potential mixing of hard- and software (6.2.31)
- add invalid example
- add valid examples
- addresses parts of #817
- clarify the informative note about test failure
- addresses parts of review comment of #857
- state linking in vulnerability section as example
- addresses parts of review comment of #857
- soften statement and link to CVE statistics
- addresses parts of review comment of #857
- remove "prohibited" from informative paragraph
- addresses parts of #817
- add optional test to detect multiple same PIH (6.2.32)
- add invalid examples
- add valid examples
- addresses parts of review comment of #857
- remove merge artifact
- clarify text regarding matching
@tschmidtb51 tschmidtb51 requested a review from sthagen January 29, 2025 17:40
@tschmidtb51 tschmidtb51 self-assigned this Jan 29, 2025
- addresses parts of #841
- correct vers example by removing invalid space
- addresses parts of #841
- update link to vers
- addresses parts of #841
- update count of conformance targets
- addresses parts of #841
- fix refs in date and time (wrong brackets)
- addresses parts of #841
- fix format mistake
- add section 5 to be of relevance for conformance
- addresses parts of #841
- sort guidance on size
- remove obsolete scores from guidance on size
- addresses parts of #841
- update OpenSSL digest list
Copy link
Contributor

@sthagen sthagen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

- addresses parts of #841
- update reference to ISO 8601
- addresses parts of #841
- update SBOM format references
- addresses parts of #530, #841
- rephrase test 6.1.11 and 6.3.4 to clarify the test according to the change to multiple CWEs
- addresses parts of #774, #841
- add conversion rule
- correct JSON path by adding missing `product_identification_helper` part
- addresses parts of #841
- update missing dates
- update CVE link
- addresses parts of #841, #817, #629
- clearly state that additional conventions have to be respected by the consumer
Editorial for Editor revision 2025-01-29
@tschmidtb51 tschmidtb51 requested a review from sthagen January 31, 2025 21:40
Copy link
Contributor

@sthagen sthagen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Still LGTM.

Copy link
Contributor

@santosomar santosomar left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for all your work here!!

Signed-off-by: Stefan Hagen <[email protected]>
@sthagen sthagen marked this pull request as draft February 14, 2025 15:59
@sthagen
Copy link
Contributor

sthagen commented Feb 14, 2025

Converted to draft to block merge while the editors are still adding purely editorial consistency commits.

@sthagen sthagen marked this pull request as ready for review February 14, 2025 17:21
@sthagen sthagen merged commit ed6e732 into master Feb 14, 2025
10 checks passed
@sthagen sthagen deleted the editor-revision-2025-01-29 branch February 14, 2025 17:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
csaf 2.1 csaf 2.1 work editor-revision already worked on in the editor revision
Projects
None yet
4 participants