search

docker-archive / oscalkit

NIST OSCAL SDK and CLI
https://docker.github.io/oscalkit/
Other
36 stars 23 forks source link

Generated implementation struct needs to include component definition ID #50

Closed haroonKhan-10p closed 5 years ago

haroonKhan-10p commented 5 years ago

The oscalkit generated implementation struct does not have componenetDefinition ID as of now, which is essential for patching implementation against a certain component.

haroonKhan-10p commented 5 years ago

From the header of our Control Mapping our component ID looks like this for now: component ID: cpe:2.3:a:docker:ucp:3.2.0:*:*:*:*:*:*:* I am gonna extract cpe:2.3:a:docker:ucp:3.2.0. Or do we need to use a UUID here?

anweiss commented 5 years ago

@haroonKhan-10p yes, please extract the CPE value.

anweiss commented 5 years ago

Addressed via #51