search

GovReady / govready-q

An open source, self-service GRC tool to automate security assessments and compliance.
https://q.govready.com
Other
179 stars 55 forks source link

Unable to import OSCAL components #1731

Open cemasirt opened 2 years ago

cemasirt commented 2 years ago

Describe the bug as a Story I'm on version v0.9.11.2 and cannot import component definitions I've got from other places

To Reproduce Steps to reproduce the behavior:

  1. Go to https://github.com/GovReady/components-stig and download "components_govready_demo_01\splunk-demo.json"
  2. Click on "Component Library>Import OSCAL Component"
  3. Select and import the downloaded json at step 2.
  4. See error IMPORT HALTED. Invalid Component JSON: 1 validation error for ComponentDefinition components value is not a valid list (type=type_error.list)

Expected behavior Component to be loaded into component list

Screenshots image

Desktop (please complete the following information):

Developer hints

Another resource with import issue. https://github.com/GovReady/oscal-lifecycle-examples/blob/main/component/govready-ssp-oscal-cmpt-ubuntu-16.04-lts-stig-inpsec-profile.json

gregelin commented 2 years ago

@cemasirt We'll try to replicate from links you described. I suspect the component-stigs need to be updated to OSCAL 1.0

rylew1 commented 1 year ago

@gregelin Were you ever able to look at this?

gregelin commented 1 year ago

@rylew1 We spent last upgrading OSCAL. Will provide another update early this week!