csaf_distribution icon indicating copy to clipboard operation
csaf_distribution copied to clipboard

Checker: ROLIE validation too late?

Open tschmidtb51 opened this issue 1 year ago • 0 comments

Today, I run into a situation, while I tried to validate a new CSAF trusted provider: The csaf_checker reported:

"Loading ROLIE feed failed: https://support.citrix.com/.well-known/csaf/public/feed-tlp-white.json: json: cannot unmarshal object into Go struct field FeedData.feed.link of type []csaf.Link."

At first, I was confused why I get a Go error message but during the debug, I realized that we do the validation after this error occurs. So my question is: Should we validate the JSON schema first before we try to put it into our structure or is that behavior expected?

tschmidtb51 avatar Jul 20 '23 17:07 tschmidtb51