diff --git a/cmd/csaf_checker/processor.go b/cmd/csaf_checker/processor.go index 36a22a4d..e03261e3 100644 --- a/cmd/csaf_checker/processor.go +++ b/cmd/csaf_checker/processor.go @@ -340,6 +340,20 @@ func (p *processor) domainChecks(domain string) []func(*processor, string) error if !direct { checks = append(checks, (*processor).checkWellknownSecurityDNS) + } else { + p.badSecurity.use() + p.badSecurity.info( + "Performed no test of security.txt " + + "since the direct url of the provider-metadata.json was used.") + p.badWellknownMetadata.use() + p.badWellknownMetadata.info( + "Performed no test on whether the provider-metadata.json is available " + + "under the .well-known path " + + "since the direct url of the provider-metadata.json was used.") + p.badDNSPath.use() + p.badDNSPath.info( + "Performed no test on the contents of https://csaf.data.security.DOMAIN " + + "since the direct url of the provider-metadata.json was used.") } checks = append(checks,