csaf-tools/CSAF Advisory Provider
Creates the CSAF documents to create a CSAF trusted provider
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| csaf_version | The version of the gocsaf/csaf tool suite. Either only a major version number or the exact version number. | no | 3 |
| secvisogram_version | Version of the secvisogram validator service. Either only a major version number or the exact version number. | no | 2 |
| publisher_category | The category of the CSAF Publisher | no | vendor |
| publisher_name | Name of the CSAF Publisher | yes | — |
| publisher_namespace | URL of the CSAF Publisher | yes | — |
| publisher_issuing_authority | Description of the Issuing Authority of the CSAF Publisher | yes | — |
| publisher_contact_details | Contact details of the CSAF Publisher | yes | — |
| source_csaf_documents | Path to the CSAF source documents | no | — |
| openpgp_use_signatures | Use the signtures files placed along the advisory files with `.asc` file ending | no | true |
| openpgp_key_email_address | If the OpenPGP is to be generated on the fly, this is the associated e-mail address | no | csaf@example.invalid |
| openpgp_key_real_name | If the OpenPGP is to be generated on the fly, this is the associated real name | no | Example CSAF Publisher |
| openpgp_key_type | If the OpenPGP is to be generated on the fly, this is the key type | no | RSA |
| openpgp_key_length | If the OpenPGP is to be generated on the fly, this is the key length in bits | no | 4096 |
| openpgp_secret_key | The armored OpenPGP secret key, provided as GitHub secret | no | — |
| openpgp_public_key | The armored OpenPGP public key, provided as GitHub secret | no | — |
| openpgp_passphrase | The passphrase to unlock the OpenPGP secret key, provided as GitHub secret | no | — |
| generate_index_files | Generate index.html files in .well-known/csaf/ for easier navigation in the browser. Otherwise GitHub will give 404s when accessing the directories directly. | no | false |
| target_branch | The target branch to push the resulting data to | no | gh-pages |
| tlps | Set the TLP levels allowed to be send with the upload request. Possible levels: "csaf", "white", "amber", "green", "red". The "csaf" entry lets the provider take the value from the CSAF document. | no | csaf,white |
| write_security | Write a `CSAF:` entry into `security.txt`. Creates the file if it does not exist. | no | false |
| html_title | The title of the HTML pages, if generate_index_files is active. | no | CSAF Advisories |
Outputs
no outputs