CWEs

- addresses review comments of #779 - fix title case
oasis-tcs · Aug 27, 2024 · a0758b9 · a0758b9
1 parent bfe95a1
commit a0758b9
Show file tree

Hide file tree

Showing 29 changed files with 32 additions and 32 deletions.
diff --git a/csaf_2.1/prose/edit/src/tests-02-optional.md b/csaf_2.1/prose/edit/src/tests-02-optional.md
@@ -706,7 +706,7 @@ The relevant path for this test is:
 > A tool MAY remove the document tracking id from the document title.
 > It SHOULD also remove any separating characters including whitespace, colon, dash and brackets.
 
-### Usage of deprecated CWE
+### Usage of Deprecated CWE
 
 For each item in the CWE array it MUST be tested that the CWE is not deprecated in the given version.
 
@@ -732,7 +732,7 @@ The relevant path for this test is:
 
 > A tool MAY suggest to replace the deprecated CWE with its replacement or closest equivalent.
 
-### Usage of non-latest CWE Version
+### Usage of Non-Latest CWE Version
 
 For each item in the CWE array it MUST be tested that the latest CWE version available at the time of the last revision was used.
 The test SHALL fail if a later CWE version was used.
@@ -771,7 +771,7 @@ The relevant path for this test is:
 > A tool MAY suggest to use the latest version available at the time of the `current_release_date`.
 > This is most likely also the overall latest CWE version as modifications to a CSAF document lead to a new `current_release_date`.
 
-### Usage of CWE not allowed for Vulnerability Mapping
+### Usage of CWE Not Allowed for Vulnerability Mapping
 
 For each item in the CWE array it MUST be tested that the vulnerability mapping is allowed.
 
@@ -797,7 +797,7 @@ The relevant path for this test is:
 
 > The usage of CWE-20 is discouraged as "is commonly misused in low-information vulnerability reports when lower-level CWEs could be used instead, or when more details about the vulnerability are available". [cite](https://cwe.mitre.org/data/definitions/20.html)
 
-### Usage of CWE allowed with Review for Vulnerability Mapping
+### Usage of CWE Allowed with Review for Vulnerability Mapping
 
 For each item in the CWE array it MUST be tested that the vulnerability mapping is allowed without review.
 

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-23-01.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-23-01.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of deprecated CWE (failing example 1)",
+    "title": "Optional test: Usage of Deprecated CWE (failing example 1)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-23-01",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-23-02.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-23-02.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of deprecated CWE (failing example 2)",
+    "title": "Optional test: Usage of Deprecated CWE (failing example 2)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-23-02",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-23-03.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-23-03.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of deprecated CWE (failing example 3)",
+    "title": "Optional test: Usage of Deprecated CWE (failing example 3)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-23-03",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-23-11.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-23-11.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of deprecated CWE (valid example 1)",
+    "title": "Optional test: Usage of Deprecated CWE (valid example 1)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-23-11",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-23-12.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-23-12.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of deprecated CWE (valid example 2)",
+    "title": "Optional test: Usage of Deprecated CWE (valid example 2)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-23-12",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-23-13.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-23-13.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of deprecated CWE (valid example 3)",
+    "title": "Optional test: Usage of Deprecated CWE (valid example 3)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-23-13",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-01.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-01.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of non-latest CWE Version (failing example 1)",
+    "title": "Optional test: Usage of Non-Latest CWE Version (failing example 1)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-24-01",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-02.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-02.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of non-latest CWE Version (failing example 2)",
+    "title": "Optional test: Usage of Non-Latest CWE Version (failing example 2)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-24-02",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-03.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-03.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of non-latest CWE Version (failing example 3)",
+    "title": "Optional test: Usage of Non-Latest CWE Version (failing example 3)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-24-03",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-04.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-04.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of non-latest CWE Version (failing example 4)",
+    "title": "Optional test: Usage of Non-Latest CWE Version (failing example 4)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-24-04",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-11.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-11.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of non-latest CWE Version (valid example 1)",
+    "title": "Optional test: Usage of Non-Latest CWE Version (valid example 1)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-24-11",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-12.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-12.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of non-latest CWE Version (valid example 2)",
+    "title": "Optional test: Usage of Non-Latest CWE Version (valid example 2)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-24-12",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-13.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-13.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of non-latest CWE Version (valid example 3)",
+    "title": "Optional test: Usage of Non-Latest CWE Version (valid example 3)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-24-13",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-14.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-24-14.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of non-latest CWE Version (valid example 4)",
+    "title": "Optional test: Usage of Non-Latest CWE Version (valid example 4)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-24-14",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-01.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-01.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of CWE not allowed for Vulnerability Mapping (failing example 1)",
+    "title": "Optional test: Usage of CWE Not Allowed for Vulnerability Mapping (failing example 1)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-25-01",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-02.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-02.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of CWE not allowed for Vulnerability Mapping (failing example 2)",
+    "title": "Optional test: Usage of CWE Not Allowed for Vulnerability Mapping (failing example 2)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-25-02",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-03.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-03.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of CWE not allowed for Vulnerability Mapping (failing example 3)",
+    "title": "Optional test: Usage of CWE Not Allowed for Vulnerability Mapping (failing example 3)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-25-03",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-04.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-04.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of CWE not allowed for Vulnerability Mapping (failing example 4)",
+    "title": "Optional test: Usage of CWE Not Allowed for Vulnerability Mapping (failing example 4)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-25-04",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-11.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-11.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of CWE not allowed for Vulnerability Mapping (valid example 1)",
+    "title": "Optional test: Usage of CWE Not Allowed for Vulnerability Mapping (valid example 1)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-25-11",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-12.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-12.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of CWE not allowed for Vulnerability Mapping (valid example 2)",
+    "title": "Optional test: Usage of CWE Not Allowed for Vulnerability Mapping (valid example 2)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-25-12",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-13.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-13.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of CWE not allowed for Vulnerability Mapping (valid example 3)",
+    "title": "Optional test: Usage of CWE Not Allowed for Vulnerability Mapping (valid example 3)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-25-13",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-14.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-25-14.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of CWE not allowed for Vulnerability Mapping (valid example 4)",
+    "title": "Optional test: Usage of CWE Not Allowed for Vulnerability Mapping (valid example 4)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-25-14",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-26-01.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-26-01.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of CWE allowed with Review for Vulnerability Mapping (failing example 1)",
+    "title": "Optional test: Usage of CWE Allowed with Review for Vulnerability Mapping (failing example 1)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-26-01",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-26-02.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-26-02.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of CWE allowed with Review for Vulnerability Mapping (failing example 2)",
+    "title": "Optional test: Usage of CWE Allowed with Review for Vulnerability Mapping (failing example 2)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-26-02",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-26-03.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-26-03.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of CWE allowed with Review for Vulnerability Mapping (failing example 3)",
+    "title": "Optional test: Usage of CWE Allowed with Review for Vulnerability Mapping (failing example 3)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-26-03",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-26-11.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-26-11.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of CWE allowed with Review for Vulnerability Mapping (valid example 1)",
+    "title": "Optional test: Usage of CWE Allowed with Review for Vulnerability Mapping (valid example 1)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-26-11",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-26-12.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-26-12.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of CWE allowed with Review for Vulnerability Mapping (valid example 2)",
+    "title": "Optional test: Usage of CWE Allowed with Review for Vulnerability Mapping (valid example 2)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-26-12",

diff --git a/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-26-13.json b/csaf_2.1/test/validator/data/optional/oasis_csaf_tc-csaf_2_1-2024-6-2-26-13.json
@@ -13,7 +13,7 @@
       "name": "OASIS CSAF TC",
       "namespace": "https://csaf.io"
     },
-    "title": "Optional test: Usage of CWE allowed with Review for Vulnerability Mapping (valid example 3)",
+    "title": "Optional test: Usage of CWE Allowed with Review for Vulnerability Mapping (valid example 3)",
     "tracking": {
       "current_release_date": "2024-01-21T10:00:00.000Z",
       "id": "OASIS_CSAF_TC-CSAF_2.1-2024-6-2-26-13",