feat(CSAF2.1): #402 add mandatory test 6.2.39.3

Author: rainer-exxcellent

README.md

@@ -464,6 +464,7 @@ export const recommendedTest_6_2_19: DocumentTest
 export const recommendedTest_6_2_20: DocumentTest
 export const recommendedTest_6_2_22: DocumentTest
 export const recommendedTest_6_2_39_2: DocumentTest
+export const recommendedTest_6_2_39_3: DocumentTest
 ```
 
 [(back to top)](#bsi-csaf-validator-lib)

csaf_2_1/recommendedTests.js

@@ -32,3 +32,4 @@ export { recommendedTest_6_2_28 } from './recommendedTests/recommendedTest_6_2_2
 export { recommendedTest_6_2_29 } from './recommendedTests/recommendedTest_6_2_29.js'
 export { recommendedTest_6_2_38 } from './recommendedTests/recommendedTest_6_2_38.js'
 export { recommendedTest_6_2_39_2 } from './recommendedTests/recommendedTest_6_2_39_2.js'
+export { recommendedTest_6_2_39_3 } from './recommendedTests/recommendedTest_6_2_39_3.js'

csaf_2_1/recommendedTests/recommendedTest_6_2_39_3.js

@@ -0,0 +1,105 @@
+import Ajv from 'ajv/dist/jtd.js'
+import {
+  containsOneNoteWithTitleAndCategory,
+  getTranslationInDocumentLang,
+  isLangSpecifiedAndNotEnglish,
+} from '../../lib/shared/languageSpecificTranslation.js'
+
+const ajv = new Ajv()
+
+/*
+  This is the jtd schema that needs to match the input document so that the
+  test is activated. If this schema doesn't match it normally means that the input
+  document does not validate against the csaf json schema or optional fields that
+  the test checks are not present.
+ */
+const inputSchema = /** @type {const} */ ({
+  additionalProperties: true,
+  properties: {
+    document: {
+      additionalProperties: true,
+      properties: {
+        category: { type: 'string' },
+      },
+      optionalProperties: {
+        lang: {
+          type: 'string',
+        },
+        notes: {
+          elements: {
+            additionalProperties: true,
+            optionalProperties: {
+              category: {
+                type: 'string',
+              },
+              title: {
+                type: 'string',
+              },
+            },
+          },
+        },
+      },
+    },
+  },
+})
+
+const validateSchema = ajv.compile(inputSchema)
+
+/**
+ * If the document language is specified but not English, it MUST be tested that exactly one item
+ * in document notes exists that has the language specific translation of the term Reasoning for Supersession as title,
+ * The category of this item MUST be description. If no language specific translation has been recorded,
+ *  the test MUST be skipped and output an information to the user that no such translation is known.
+ *
+ * @param {unknown} doc
+ */
+export function recommendedTest_6_2_39_3(doc) {
+  /*
+        The `ctx` variable holds the state that is accumulated during the test run and is
+        finally returned by the function.
+       */
+  const ctx = {
+    warnings:
+      /** @type {Array<{ instancePath: string; message: string }>} */ ([]),
+  }
+
+  const noteCategory = 'description'
+
+  if (!validateSchema(doc) || doc.document.category !== 'csaf_superseded') {
+    return ctx
+  }
+
+  const supersessionInDocLang = getTranslationInDocumentLang(
+    doc,
+    'reasoning_for_supersession'
+  )
+  if (!supersessionInDocLang) {
+    ctx.warnings.push({
+      instancePath: '/document/notes',
+      message:
+        'no language specific translation for "Reasoning for Supersession" has been recorded',
+    })
+    return ctx
+  }
+
+  if (isLangSpecifiedAndNotEnglish(doc.document.lang)) {
+    const notes = doc.document.notes
+    if (
+      !notes ||
+      !containsOneNoteWithTitleAndCategory(
+        notes,
+        supersessionInDocLang,
+        noteCategory
+      )
+    ) {
+      ctx.warnings.push({
+        instancePath: '/document/notes',
+        message:
+          `for document category "csaf_withdrawn" exactly one note must exist ` +
+          `with note category "${noteCategory}" and title "${supersessionInDocLang}`,
+      })
+    }
+  }
+
+  return ctx
+}

tests/csaf_2_1/oasis.js

@@ -57,7 +57,6 @@ const excluded = [
   '6.2.36',
   '6.2.37',
   '6.2.39.1',
-  '6.2.39.3',
   '6.2.39.4',
   '6.2.40',
   '6.2.41',

tests/csaf_2_1/recommendedTest_6_2_39_3.js

@@ -0,0 +1,40 @@
+import { recommendedTest_6_2_39_3 } from '../../csaf_2_1/recommendedTests/recommendedTest_6_2_39_3.js'
+import { expect } from 'chai'
+import assert from 'node:assert'
+import { getTranslationInDocumentLang } from '../../lib/shared/languageSpecificTranslation.js'
+
+describe('recommendedTest_6_2_39_3', function () {
+  it('only runs on relevant documents', function () {
+    assert.equal(recommendedTest_6_2_39_3({}).warnings.length, 0)
+  })
+
+  it('only runs on valid language', function () {
+    assert.equal(
+      recommendedTest_6_2_39_3({
+        document: { lang: '123', license_expression: 'MIT' },
+      }).warnings.length,
+      0
+    )
+  })
+
+  it('check get ReasoningForWithdrawal in document lang', function () {
+    expect(
+      getTranslationInDocumentLang(
+        { document: { lang: 'de' } },
+        'reasoning_for_supersession'
+      )
+    ).to.eq('Begründung für die Ersetzung')
+    expect(
+      getTranslationInDocumentLang(
+        { document: { lang: 'jp' } },
+        'reasoning_for_supersession'
+      )
+    ).to.eq(undefined)
+    expect(
+      getTranslationInDocumentLang(
+        { document: {} },
+        'reasoning_for_supersession'
+      )
+    ).to.eq(undefined)
+  })
+})