The CSAF file is always connected with just one unique advisory plus a supplied advisory might include one or more product or service Variation(s) and one or more components, depending on the product or service form and https://medium.com/@linkdaddy/what-is-a-source-file-226b0fd56812