Add Microsoft CSAF in the sources

[Rafiot]

https://msrc.microsoft.com/csaf/provider-metadata.json

[jonite]

While adding MSFT, could you also add NCSC-NL CSAF?
https://vulnerabilities.ncsc.nl/csaf/

[cedricbonhomme]

While adding MSFT, could you also add NCSC-NL CSAF? https://vulnerabilities.ncsc.nl/csaf/

Just to mention that we do have sightings from NCSC-NL:
https://vulnerability.circl.lu/sightings/?query=ncsc

[Rafiot]

That's what happen when trying to load Microsoft CSAF, investigating further.

{"time":"2024-11-19T14:41:39+01:00","level":"INFO","msg":"AdvisoryFileProcessor.Process: \"https://msrc.microsoft.com/csaf/changes.csv\" has an invalid time stamp in line 91: parsing time \"2024-11-12T08:00:00.0000000\" as \"2006-01-02T15:04:05Z07:00\": cannot parse \"\" as \"Z07:00\""}

gocsaf/csaf#588

[Rafiot]

@jonite just checking, in case ou know: the CSAF from NCSC NL seems to be a clone of the NVD. Is there anything else in there?