mitre / inspec_tools

A command-line and ruby API of utilities, converters and tools for creating, converting and processing security baseline formats, results and data

https://inspec-tools.mitre.org/

Other

92 stars 30 forks source link

CCE- data seems to be coming into the CCI references in some XCCDF files #151

Closed aaronlippold closed 4 years ago

aaronlippold commented 4 years ago

I am not sure if this is intentional in the new STIGs or if it is a typo - but for now we don't support CCE references.

Added a filter in

We should look into this more via the stig viewer to find out if they made a change upstream to link things via CCI and or CCE or both.

156

aaronlippold commented 4 years ago

Either way we have to decide how to gracefully handle it perhaps by letting them know that the CCEs were not 'processed' rather than just throwing them out ??