Skip to content

fix: engine is invalid when name is missing#710

Merged
s-l-teichmann merged 1 commit intogocsaf:mainfrom
benja-M-1:fix/engine-validation
Dec 18, 2025
Merged

fix: engine is invalid when name is missing#710
s-l-teichmann merged 1 commit intogocsaf:mainfrom
benja-M-1:fix/engine-validation

Conversation

@benja-M-1
Copy link
Copy Markdown
Contributor

@benja-M-1 benja-M-1 commented Dec 17, 2025

Hello 👋 , this PR fixes #709

According to the specification, the validation of the tracking.generator.engine should check the name is not nil rather than the version which is optional. This is what the PR changes.

Comment thread csaf/advisory.go
@bernhardreiter
Copy link
Copy Markdown
Member

go run ./cmd/csaf_validator/main.go does not fail, which is 👍

But doesn't this mean that it does not call Validate() and probably should? confused
Guess I'll have a look at some tests or @s-l-teichmann tomorrow.

@benja-M-1
Copy link
Copy Markdown
Contributor Author

But doesn't this mean that it does not call Validate() and probably should? confused

No, the validator commad uses the jsonschema to validate. They don't use the same code.

Copy link
Copy Markdown
Member

@bernhardreiter bernhardreiter left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Copy Markdown
Contributor

@s-l-teichmann s-l-teichmann left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM & works

Copy link
Copy Markdown
Contributor

@s-l-teichmann s-l-teichmann left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@s-l-teichmann s-l-teichmann merged commit 52ce6bc into gocsaf:main Dec 18, 2025
3 of 4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Engine validation fails when version is empty

3 participants