CSAF CS03 - Statement of Use from BSI

Dear colleagues,
Please find BSI's statement of use below.

Best regards,
Thomas

Statement of use

Federal Office for Information Security (BSI)

Godesberger Allee 185-189
53175 Bonn
Germany

General Statement

BSI has successfully used or implemented the Common Security Advisory Framework Version 2.0 CSAF producer [2], CSAF consumer [2] and CSAF basic validator [3] as specified in the CSAF specification [1] in accordance  with the conformance clauses specified therein and OASIS policy.

Detailed Statement

BSI has successfully used, or implemented, a CSAF producer [2], CSAF consumer [2] and CSAF basic validator [3] supporting the stated functionality defined in the CSAF specification [1], in accordance with the conformance  clauses specified therein.

BSI (CERT-Bund) has become a CSAF trusted provider satisfying the requirements defined in the CSAF specification [1]. The provider metadata is available at: https://wid.cert-bund.de/.well-known/csaf/provider-metadata.json

[1] Common Security Advisory Framework Version 2.0, Committee Specification 03, 01 August 2022, https://docs.oasis-open.org/csaf/csaf/v2.0/cs03/csaf-v2.0-cs03.md
[2] Secvisogram, https://github.com/secvisogram/secvisogram
[3] csaf-validator-lib, https://github.com/csaf-poc/csaf_distribution