NAME¶

csaf_checker - check whether a CSAF provider meets the standard

SYNOPSIS¶

csaf_checker [OPTIONS] domain...

DESCRIPTION¶

Runs the conformance checks of the CSAF 2.0 standard against each domain given and reports which requirements the provider meets. It looks at the provider metadata, the ROLIE feeds, the index and changes files, the integrity and signature files and the advisories themselves, and it writes the result as text, JSON, HTML or Markdown.

The checks on advisories include validation against the CSAF JSON schema, which needs the OASIS schemas from the csaf-oasis-schemas package. The ROLIE feed schema is not in that package, because no licence covers it, so the ROLIE feed check reports a missing schema.

OPTIONS¶

--help lists all options. Common ones are -o, --output, -f, --format, --pre_flight and --insecure.

FILES¶

Read in this order, the first that exists wins: ~/.config/csaf/checker.toml, ~/.csaf_checker.toml, csaf_checker.toml in the current directory. Override with -c, --config.

SEE ALSO¶

csaf_downloader(1), /usr/share/doc/csaf-tools/csaf_checker.md