NAME¶

csaf_downloader - download CSAF advisories from a provider

SYNOPSIS¶

csaf_downloader [OPTIONS] domain...

DESCRIPTION¶

Finds the provider metadata of each domain given, walks the advisories it lists and writes them to disk, by default into a directory named after the current time.

Every advisory is checked before it is stored: the SHA256 and SHA512 sums, the OpenPGP signature, the CSAF JSON schema and the file name rule. In the default strict mode an advisory that fails any of these is not stored. Pass --validation_mode=unsafe to store it anyway, marked as invalid.

Schema validation needs the OASIS schemas, which Debian ships in the csaf-oasis-schemas package. Without them every advisory fails the schema check, so in strict mode nothing is stored.

OPTIONS¶

--help lists all options. The ones that change what gets stored are -d, --directory, -f, --folder, -n, --no_store, -t, --time_range, -i, --ignore_pattern and -m, --validation_mode.

FILES¶

Read in this order, the first that exists wins: ~/.config/csaf/downloader.toml, ~/.csaf_downloader.toml, csaf_downloader.toml in the current directory. Override with -c, --config.

SEE ALSO¶

csaf_checker(1), csaf_validator(1), /usr/share/doc/csaf-tools/csaf_downloader.md