Skip to content

Commit

Permalink
Contradicting Product Status vs Remediation
Browse files Browse the repository at this point in the history
- addresses parts of oasis-tcs#541, oasis-tcs#662, oasis-tcs#563
- fix spelling mistake
- improve wording
- clarify that this also applies to indirect relationships through product groups
  • Loading branch information
tschmidtb51 committed Oct 25, 2024
1 parent 05502f8 commit a274571
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 3 deletions.
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
### Contradicting Remediations

For each item in `/vulnerabilities[]/remediations` it MUST be tested that the same Product ID is not member of contradicting remediation categories.
For each item in `/vulnerabilities[]/remediations` it MUST be tested that a Product is not member of contradicting remediation categories.
This takes indirect relations through Product Groups into account.

The relevant path for this test is:

Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
### Contradicting Product Status Remediation Combination

For each item in `/vulnerabilities[]/remediations` it MUST be tested that the same Product ID is not member of a contradicting product status group.
For each item in `/vulnerabilities[]/remediations` it MUST be tested that a Product is not member of a contradicting product status group.
This takes indirect relations through Product Groups into account.

The relevant path for this test is:

Expand All @@ -27,4 +28,4 @@ The relevant path for this test is:
]
```

> For the product with product ID `CSAFPID-908070` a `vendo_fix` is given but the product was not affected at all.
> For the product with product ID `CSAFPID-908070` a `vendor_fix` is given but the product was not affected at all.

0 comments on commit a274571

Please sign in to comment.