Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

added ability to compare new benchmarks to old profiles still using deprecated IDs (V-XXXXXX) #1

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

wdower
Copy link

@wdower wdower commented Feb 1, 2022

resolves cerner#18, cerner#16

Use --rule-id false to have inspec_delta look up profile controls using the legacy vulnerability ID field (V-XXXXXX) in the updated benchmark.

  • The flag defaults to true since this should only be necessary for older profiles.
  • inspec_delta will rename the control (control SV-IMANEWNUMBER) and the control file (SV-NEWNUMBER.rb) to use the new Rule ID.
  • inspec_delta also populates a legacy ID tag now
inspec_delta profile update -p profileOldIDs -s benchmarkNewIDs --rule-id false

Signed-off-by: Will Dower [email protected]

@wdower wdower added the enhancement New feature or request label Feb 1, 2022
@wdower wdower requested a review from Amndeep7 February 1, 2022 05:03
@wdower wdower self-assigned this Feb 1, 2022
@wdower wdower closed this Feb 1, 2022
@wdower wdower reopened this Feb 1, 2022
…enames, so that they can split the filename and file content changes into separate commits

Signed-off-by: Will Dower <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add functionality to allow updating a profile to a new STIG version with changed Vuln IDs
2 participants