example_csaf.py

import json
import sys
from pathlib import Path

from jsonpath_schema import Schema, validateJSONPath

CSAF_SCHEMA_URI = "https://docs.oasis-open.org/csaf/csaf/v2.1/schema/csaf.json"


def load_csaf_bundle(path: str | Path) -> dict[str, Schema]:
    """Load the bundle's store and add unambiguous, undated CVSS aliases.

    Raises:
        OSError: If the bundle cannot be opened or read.
        UnicodeError: If the bundle is not valid UTF-8.
        json.JSONDecodeError: If the bundle is not valid JSON.
        KeyError: If the bundle has no ``schemas`` mapping.
        ValueError: If an undated CVSS alias is ambiguous.
    """
    with Path(path).open(encoding="utf-8") as source:
        store = json.load(source)["schemas"]
    aliases: dict[str, Schema] = {}
    for uri, schema in store.items():
        if uri.startswith("https://www.first.org/cvss/cvss-") and "?" in uri:
            alias = uri.split("?", 1)[0]
            aliases[alias] = schema
    return store | aliases


def main() -> int:
    store = load_csaf_bundle(Path("csaf-2.1-bundle.json"))
    schema = store[CSAF_SCHEMA_URI]
    paths = [
        "$.document.title",
        "$.vulnerabilities[0].metrics[0].content.cvss_v3.baseScore",
        "$.vulnerabilities[0].metrics[0].content.cvss_v4.baseSeverity",
        "$.document.unknown",
    ]
    error_count = 0
    for path in paths:
        if not validateJSONPath(path, schema, store, strict=True):
            print(path, "is not valid JSONPath in schema")
            error_count += 1
        else:
            print(path, "is valid JSONPath in schema")
    return error_count


if __name__ == "__main__":
    sys.exit(main())