Enhance SAF ASFF2HDF and HDF2ASFF converter tools

ejaronne commented 2 years ago

[ ] Auto extract the findings using asff2hdf via API when converting to HDF for downstream use.
[x] Preserve passthrough object information in asff (and reconstitute in asff2hdf)
[x] Preserve controls.code objects in asff (and reconstitute in asff2hdf)
[ ] Generate asff objects by InSpec control ID (NOT NIST SP-800-53 controls) as opposed to each sub-test done in current version. i.e., keep the results for a specific InSpec control ID together just like in normal HDF and include a calculated Status to coincide with the ASFF compliance Status. i.e., for a RHEL7 STIG with 247 requirements, we should generate only 248 asff json objects (1 header/execution asff json plus 247 control IDs)
[ ] Handle case where only an execution finding is present

ejaronne commented 2 years ago

@camdenmoors the 2nd and 3rd items are checked but I can't find a branch or PR related?

camdenmoors commented 2 years ago

@camdenmoors the 2nd and 3rd items are checked but I can't find a branch or PR related?

mitre / heimdall2