mitre / inspec_tools

A command-line and ruby API of utilities, converters and tools for creating, converting and processing security baseline formats, results and data
https://inspec-tools.mitre.org/
Other
91 stars 30 forks source link

Update csv2inspec to handle CSV generated by STIG Viewer #204

Closed Bialogs closed 4 years ago

Bialogs commented 4 years ago

CSVs generated by STIG viewer present some obstacles because CCI numbers are exported with additional information by STIG viewer. This caused errors when trying to apply the NIST tags to controls because the CCI cell reference within the CSV had extra information and was not compatible with our CCI to NIST XML mapping.

Basically this meant that the NIST control was always empty and the CCI tag had a bunch of extra information in it.

This also updates the generate_map file to use a separate class per sub-command (following a pattern I'm trying to standardize within the gem) and fixes spacing issues with the generated map YML.

Closes #200 Closes #201