Merge pull request #173 from secvisogram/chore/dependency-updates

Chore/dependency updates

Author: rainer-exxcellent

backend/package-lock.json

@@ -316,7 +316,6 @@ The following tests are not yet implemented and therefore missing:
 - Mandatory Test 6.1.27.18
 - Mandatory Test 6.1.42
 - Mandatory Test 6.1.44
-- Mandatory Test 6.1.45
 - Mandatory Test 6.1.46
 - Mandatory Test 6.1.47
 - Mandatory Test 6.1.48
@@ -434,6 +433,7 @@ export const mandatoryTest_6_1_39: DocumentTest
 export const mandatoryTest_6_1_40: DocumentTest
 export const mandatoryTest_6_1_41: DocumentTest
 export const mandatoryTest_6_1_43: DocumentTest
+export const mandatoryTest_6_1_45: DocumentTest
 export const mandatoryTest_6_1_52: DocumentTest
 ```
 

csaf-validator-lib/README.md

@@ -0,0 +1,43 @@
+import addFormats from 'ajv-formats'
+import Ajv2020 from 'ajv/dist/2020.js'
+import cvss_v2_0 from '../schemas/cvss-v2.0.js'
+import cvss_v3_0 from '../schemas/cvss-v3.0.js'
+import cvss_v3_1 from '../schemas/cvss-v3.1.js'
+import cvss_v4_0 from './csafAjv/cvss-v4.0.js'
+import meta from './csafAjv/meta.js'
+import formatAssertion from './csafAjv/format-assertion.js'
+import ssvcDecisionPointValueSelection from './csafAjv/Decision_Point_Value_Selection-1-0-1.js'
+import ssvcDecisionPoint from './csafAjv/Decision_Point-1-0-1.js'
+import { timestampRegex, validateTimestamp } from './dateHelper.js'
+
+const csafAjv = new Ajv2020({ strict: false, allErrors: true })
+addFormats(csafAjv)
+csafAjv.addSchema(cvss_v2_0, 'https://www.first.org/cvss/cvss-v2.0.json')
+csafAjv.addSchema(cvss_v3_0, 'https://www.first.org/cvss/cvss-v3.0.json')
+csafAjv.addSchema(cvss_v3_1, 'https://www.first.org/cvss/cvss-v3.1.json')
+csafAjv.addSchema(cvss_v4_0, 'https://www.first.org/cvss/cvss-v4.0.json')
+csafAjv.addSchema(
+  meta,
+  'https://docs.oasis-open.org/csaf/csaf/v2.1/schema/meta.json'
+)
+csafAjv.addSchema(
+  formatAssertion,
+  'https://json-schema.org/draft/2020-12/meta/format-assertion'
+)
+csafAjv.addSchema(
+  ssvcDecisionPointValueSelection,
+  'https://certcc.github.io/SSVC/data/schema/v1/Decision_Point_Value_Selection-1-0-1.schema.json'
+)
+csafAjv.addSchema(
+  ssvcDecisionPoint,
+  'https://certcc.github.io/SSVC/data/schema/v1/Decision_Point-1-0-1.schema.json'
+)
+
+csafAjv.addFormat('date-time', {
+  type: 'string',
+  validate: (v) => {
+    return timestampRegex.test(v) && validateTimestamp(v)
+  },
+})
+
+export default csafAjv