NAME

CSAF::Validator::InformativeTests

SYNOPSIS

use CSAF::Validator::InformativeTests;

my $v = CSAF::Validator::InformativeTests->new( csaf => $csaf );

$v->exec_test('6.3.11');
$v->TEST_6_3_11;

DESCRIPTION

Informative tests provide insights in common mistakes and bad practices. They MAY fail at a valid CSAF document. It is up to the issuing party to decide whether this was an intended behavior and can be ignore or should be treated.

6.3.1 Use of CVSS v2 as the only Scoring System
6.3.2 Use of CVSS v3.0
6.3.3 Missing CVE
6.3.4 Missing CWE
6.3.5 Use of Short Hash
6.3.6 Use of non-self referencing URLs Failing to Resolve (*)
6.3.7 Use of self referencing URLs Failing to Resolve (*)
6.3.8 Spell check (*)
6.3.9 Branch Categories
6.3.10 Usage of Product Version Range
6.3.11 Usage of V as Version Indicator

(*) actually not tested in this CSAF distribution.

METHODS

CSAF::Validator::InformativeTests inherits all methods from CSAF::Validator::Base and implements the following new ones.

TEST_6_3_1

Use of CVSS v2 as the only Scoring System

TEST_6_3_2

Use of CVSS v3_0

TEST_6_3_3

Missing CVE

TEST_6_3_4

Missing CWE

TEST_6_3_5

Use of Short Hash

TEST_6_3_6

Use of non-self referencing URLs Failing to Resolve

TEST_6_3_7

Use of self referencing URLs Failing to Resolve

TEST_6_3_8

Spell check (*)

TEST_6_3_9

Branch Categories

TEST_6_3_10

Usage of Product Version Range

TEST_6_3_11

Usage of V as Version Indicator

SUPPORT

Bugs / Feature Requests

Please report any bugs or feature requests through the issue tracker at https://github.com/giterlizzi/perl-CSAF/issues. You will be notified automatically of any progress on your issue.

Source Code

This is open source software. The code repository is available for public review and contribution under the terms of the license.

https://github.com/giterlizzi/perl-CSAF

git clone https://github.com/giterlizzi/perl-CSAF.git

AUTHOR

• Giuseppe Di Terlizzi <gdt@cpan.org>

LICENSE AND COPYRIGHT

This software is copyright (c) 2023-2024 by Giuseppe Di Terlizzi.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.