From Advisory to Automation: Using CSAF to Track Security Patches on Z

Project and Program: Service Delivery, Security and Compliance

Tags: Proceedings, 2026, SHARE Pittsburgh 2026

OASIS's Cyber Security Advisory Framework (CSAF) is gaining support as a key standard in communicating information on vulnerabilities and fixes in distributed and Z environments alike. These documents contain key information for vulnerability management, like any CVE's, CWE's or CVSS information related to a vulnerability or a patch, and present it in a standardized JSON format. Come discuss the application of this data in the Z world, and how you can use python and other automation tools to gain insights into the security patches you need for your system.

Back to Proceedings File Library