Issues

• Add control endpoint to provider and separate create capability from uploader

  csaf_providercsaf_uploadercsaf 2.1
  gocsaf/csaf#823 · Filter by author 4echow opened on Nov 6, 2026

• Integration Test Segfault on certtool on Ubuntu latest

  gocsaf/csaf#821 · Filter by author JanHoefelmeyer opened on Nov 5, 2026
  1

• Check out Rust validation library

  gocsaf/csaf#820 · Filter by author cintek opened on Nov 4, 2026

• Temporarily disable remote validator in provider for integration tests

  gocsaf/csaf#819 · Filter by author cintek opened on Nov 4, 2026

• Release rewritten checker

  gocsaf/csaf#818 · Filter by author bernhardreiter opened on Nov 2, 2026

• Advisory uses acknowledgements but CSAF 2.0 specifies acknowledgments, so LoadAdvisory rejects valid advisories

  gocsaf/csaf#817 · Filter by author matthyx opened on Oct 29, 2026
  1

• Make code structure easier to understand (and thus more modular)

  gocsaf/csaf#815 · Filter by author bernhardreiter opened on Oct 28, 2026

• Improve code structure to allow for better reporting of findings

  csaf_checker
  gocsaf/csaf#814 · Filter by author bernhardreiter opened on Oct 28, 2026

• Improve structure to easier allow for variants of requirements to be checked dynamically

  csaf_checker
  gocsaf/csaf#813 · Filter by author bernhardreiter opened on Oct 28, 2026

• Upgrade checker to handle CSAF 2.1 providers as well as intermediate providers.

  csaf_checker
  gocsaf/csaf#812 · Filter by author JanHoefelmeyer opened on Oct 27, 2026

• Upgrade Go build requirements as precaution against bad emudhra TLS certificates

  gocsaf/csaf#811 · Filter by author bernhardreiter opened on Oct 27, 2026

• Can the OASIS schemas be read from disk instead of embedded?

  gocsaf/csaf#808 · Filter by author vejeta opened on Oct 26, 2026
  2

• csaf_provider upload time grows linearly with corpus size, making bulk publication impractical

  csaf_providercsaf_uploader
  gocsaf/csaf#804 · Filter by author archakisn opened on Oct 14, 2026
  7

  

• csaf_checker handles http-URLs as domains

  gocsaf/csaf#801 · Filter by author wagner-intevation opened on Oct 13, 2026
  3

• Mass publication of CSAF documents, needing several calls

  csaf_providercsaf_uploader
  gocsaf/csaf#794 · Filter by author bernhardreiter opened on Oct 7, 2026
  2

• Document major production setup variants: server-based signatures versus security team signatures

  csaf_provider
  gocsaf/csaf#793 · Filter by author bernhardreiter opened on Oct 7, 2026

• Mass re-signing in direct changeover from old to new signature key

  csaf_provider
  gocsaf/csaf#792 · Filter by author bernhardreiter opened on Oct 7, 2026

• Upload a new signature for an existing document

  csaf_providercsaf_uploader
  gocsaf/csaf#791 · Filter by author bernhardreiter opened on Oct 7, 2026

• Allow for overlapping pubkeys for step-by-step key rollover

  csaf_provider
  gocsaf/csaf#790 · Filter by author bernhardreiter opened on Oct 7, 2026

• Release major 4 version (for library use)

  gocsaf/csaf#785 · Filter by author bernhardreiter opened on Oct 5, 2026
  1

• Check potential upcoming API changes for CSAF 2.0 documents (resulting from moving to semi-generated datastructure)

  gocsaf/csaf#784 · Filter by author bernhardreiter opened on Oct 5, 2026
  1

  

• ProductTree.ProductGroups and group_ids are typed as an object, but CSAF 2.0 defines them as arrays

  defect
  gocsaf/csaf#783 · Filter by author imh0st opened on Oct 5, 2026
  5

• memory consumption spike in checker

  csaf_checker
  gocsaf/csaf#781 · Filter by author bernhardreiter opened on Sep 29, 2026
  1

• mirror always signs documents without signature

  csaf_aggregator
  gocsaf/csaf#780 · Filter by author bernhardreiter opened on Sep 25, 2026

• allow pinning of a certificate for a trusted provider

  csaf_aggregatorcsaf_downloader
  gocsaf/csaf#779 · Filter by author bernhardreiter opened on Sep 25, 2026