CSAF 2.0 Schema Intake
Status: present (vendored) · Package id: oasis-csaf-2.0
This directory vendors the official OASIS CSAF 2.0 JSON Schema files from the OASIS Approved Errata 01 publication path, plus the FIRST CVSS JSON Schemas required to resolve CSAF score references offline. Stella Ops loads these schemas locally to validate product advisories (CSAF feeds) without contacting any external standards body.
Runtime and tests must load these files locally only. Network schema fetching is forbidden. See the parent EU schema and taxonomy assets overview for the offline-intake rules that govern this directory.
Files
| File | Upstream source | SHA-256 | Bytes |
|---|---|---|---|
csaf_json_schema.json | https://docs.oasis-open.org/csaf/csaf/v2.0/csaf_json_schema.json | sha256:29c114b35b0a30831f1674f2ab8b3ed9b2890cfeaa63b924ac6ed9d70ef44262 | 57152 |
provider_json_schema.json | https://docs.oasis-open.org/csaf/csaf/v2.0/provider_json_schema.json | sha256:0270d0cfadf5202ff83a63502012a407e0e8ec3194a07296f13641c9f5630aba | 7365 |
aggregator_json_schema.json | https://docs.oasis-open.org/csaf/csaf/v2.0/aggregator_json_schema.json | sha256:6e76b27b9552168e756f4b1c8be0a9d43414338ee44793e55357869b86031242 | 7434 |
transitive/first-cvss/cvss-v2.0.json | https://www.first.org/cvss/cvss-v2.0.json | sha256:cd1a7c0815b7a47dc12fb7dded10622b96d562841f7bc6d2d8765c5d937a28f2 | 5662 |
transitive/first-cvss/cvss-v3.0.json | https://www.first.org/cvss/cvss-v3.0.json | sha256:b2b587e5dfa6d9a4be89e25cb593df04f14e7ffbe8fe5b167ceee17b6097d919 | 7587 |
transitive/first-cvss/cvss-v3.1.json | https://www.first.org/cvss/cvss-v3.1.json | sha256:77ff3df106e4588e2bb5c9cf0237f962c62d35c5002443c4bf7cc7ca16ee171f | 7588 |
License notes
- OASIS CSAF files are distributed under the OASIS specification notices and IPR policy permissions. See the repo-root license text at
third-party-licenses/OASIS-CSAF-2.0-Notice.txt. - The FIRST CVSS JSON Schemas carry a BSD-3-Clause license in the schema bodies. See the repo-root license text at
third-party-licenses/FIRST-CVSS-JSON-Schemas-BSD-3-Clause.txt.