mitre / heimdall2

Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.
Other
207 stars 59 forks source link

Add STIG name, version, and classification on export to checklist #5554

Closed em-c-rod closed 7 months ago

em-c-rod commented 9 months ago

After exporting HDF results to a checklist in Heimdall, the name that appears on the checklist when loaded in STIG Viewer is the profile name instead of the STIG name and STIG version. It also doesn't have the classification listed.

Current example:

Screenshot 2024-02-16 at 9 58 19 AM

Desired state:

Screenshot 2024-02-16 at 9 58 57 AM

Proposed Solution: In Export to Checklist GUI in Heimdall, add a field for what the title should be. Or add a field for the official STIG name and STIG version. TBD on the classification.

Screenshot 2024-02-16 at 10 12 06 AM

I think the STIGRef needs to be overwritten with the User Input. https://github.com/mitre/heimdall2/blob/41a24da3220936fb93ec86bd5ea0830f0ca2a6ac/apps/frontend/public/static/export/cklExport.ckl#L156

Additionally, either consider adding this or make a new issue if not addressed here:

For example, Info icon: Image Text Box Below Input for clarification:

Image

Amndeep7 commented 8 months ago

The structure is there to more or less match the expected output; however, the inputs are often not what is needed to make that happen. Add some more UI so that the user can overwrite the profile name, but try to provide default values so that the user can see what it is atm. Same for version/release.