csaf
Library to ingest and generate VEX documents
CSAF generator and validator
CRA Article 14 dossiers from an embedded Linux build tree. Scan Yocto or Buildroot, decide affectedness with the evidence shown, emit CSAF, OpenVEX and SRP with the statutory clock running. Zero runtime dependencies, offline-capable.
Python API and CLI for CSAF 2.0 and VEX validation using Secvisogram's validator, with CI-friendly unavailable-validator handling.
Experimental CSAF envelope and body profile validator.
A CVRF CSAF Converter, taking care about OASIS specification.
