search

GovReady / oscal-lifecycle-examples

4 stars 0 forks source link

Example NIST 800-53 control ID to inspec mapper. #2

Closed tohch4 closed 3 years ago

tohch4 commented 3 years ago

Per request from @gregelin, here is a quick one-off script to demo how one can use Python to load the JSON from the example Ubuntu 16.04 LTS Inspec profile to check conformance of a Ubuntu system with the DISA STIG into a properly formed Python dictionary for further processing.

For now, there is some hard coding of file paths. This is preliminary and further reqs can be built do discuss further processing and mapping of Inspec prof content from Inspec to an OSCAL SAP and SAR model when we make more progress.

tohch4 commented 3 years ago

@gregelin, here we go for now, per conversation with you and @aaronlippold, this is prelim, rough, not ready for anything useful yet, but this might help us get a start. Can we discuss further needs/requirements and build it out? Thanks!

gregelin commented 3 years ago

@tohch4 Thank you for the initial draft and such nice clean code. I've turned the functions into a class called InSpecMapper that we can continue to extend. Still some hardcoded file paths, but this will help me with the conversions...

gregelin commented 3 years ago

@tohch4 Oh, and I merged branch to master.