OASIS CSAF 2.0: Distributing CSAF Documents (sections 7.1 Requirements and 7.2 Roles)
https://docs.oasis-open.org/csaf/csaf/v2.0/

source.md is that text, copied verbatim from the specification by bin/sync_spec_content.py.
requirements.json is derived from source.md by bin/derive_distribution.py (requirement numbers, titles and
the role rules as data); it carries no text of its own beyond the specification's words.

Copyright OASIS Open 2022. All Rights Reserved.

Work product of the OASIS Common Security Advisory Framework (CSAF) Technical
Committee. Published under the OASIS IPR Policy (RF on RAND terms).

https://www.oasis-open.org/policies-guidelines/ipr/
