mitre / inspec_tools

A command-line and ruby API of utilities, converters and tools for creating, converting and processing security baseline formats, results and data
https://inspec-tools.mitre.org/
Other
91 stars 30 forks source link

to_xccdf: Enable STIGViewer support for automatic CCI descriptions. #222

Closed janeuner closed 3 years ago

janeuner commented 3 years ago

XCCDF ident elements with CCI values should use a cyber.mil/cci system attribute to display correctly in STIG Viewer.

Before: 20210409_rule_with_public_cci

After: 20210409_rule_with_mil_cci

janeuner commented 3 years ago

I was also able to figure out the Legacy IDs field. Adding to the PR since they are closely related in the data schema.

20210412_rule_with_legacy_ids

Bialogs commented 3 years ago

Thanks for the changes. Makes sense since these legacy IDs are now being parsed from the XCCDF content. Please take a look at my review.