Automate conversion of OSCAL catalogs and mappings

[MaurizioCasciano]

This pull request partially solves the issue https://github.com/CISecurity/CISControls_OSCAL/issues/6 It adds the OSCAL-CLI v0.3.1 submodule and defines the following Taskfile tasks:

• [✔] task sub-init Shorthand for git submodule update --init --recursive
• [✔] task build-oscal-cli Shorthand for mvn clean install in the OSCAL-CLI submodule
• [✔] task oscal-cli Shorthand for the oscal-cli executable generated by the build of the OSCAL-CLIsubmodule. It is possible to pass any argument to the underlying command. E.g. task oscal-cli -- --version
• [✔] task convert-catalogs Shorthand for the task oscal-cli -- catalog convert ... commands.
• [⚠] task convert-mappings Shorthand for the task oscal-cli -- mapping-collection convert ... commands. It fails due to gov.nist.secauto.metaschema.model.common.metapath.MetapathException: Node of definition type 'relationship' has no OSCAL namespace

• [⚠] task validate-catalogs Shorthand for the xmllint and task oscal-cli -- catalog validate ... commands.

  • [✔] xmllint --noout --schema "$OSCAL_XML_SCHEMA_DIR/oscal_catalog_schema.xsd" "$CATALOGS_DIR/xml/cis-controls-v8_OSCAL-1.0.xml"

  • [⚠] task oscal-cli -- catalog validate --as xml "$CATALOGS_DIR/xml/cis-controls-v8_OSCAL-1.0.xml" It fails due to src-resolve: Cannot resolve the name 'DateTimeDatatype' to a(n) 'type definition' component.

  • [✔] task oscal-cli -- catalog validate --as json "$CATALOGS_DIR/json/cis-controls-v8_OSCAL-1.0.json"

  • [✔] task oscal-cli -- catalog validate --as yaml "$CATALOGS_DIR/yaml/cis-controls-v8_OSCAL-1.0.yaml"

• [⚠] validate-mappings Shorthand for the xmllint and task oscal-cli -- mapping-collection validate ... commands.

  • [✔] xmllint --noout --schema "$OSCAL_XML_SCHEMA_DIR/oscal_mapping_schema.xsd" "$MAPPINGS_DIR/xml/CCM_CISControlsv8_Mapping.xml"
  • [✔] xmllint --noout --schema "$OSCAL_XML_SCHEMA_DIR/oscal_mapping_schema.xsd" "$MAPPINGS_DIR/SP_800_53MOD_CISControlsv8_Mapping.xml"
  • [⚠] task oscal-cli -- mapping-collection validate --as xml "$MAPPINGS_DIR/xml/CCM_CISControlsv8_Mapping.xml" It fails due to src-resolve: Cannot resolve the name 'DateTimeDatatype' to a(n) 'type definition' component.
  • [⚠] task oscal-cli -- mapping-collection validate --as xml "$MAPPINGS_DIR/SP_800_53MOD_CISControlsv8_Mapping.xml" It fails due to src-resolve: Cannot resolve the name 'DateTimeDatatype' to a(n) 'type definition' component.

[ginger-anderson]

Thanks Maurizio! Give me some time to take a look. We greatly appreciate your interest and contribution!