End-to-End Demo: Compliance as Code CIS Benchmarks Component Definition RHEL9 1.0.0 (snippet)

End-to-End Demo: Compliance as Code CIS Benchmarks Component Definition RHEL9 1.0.0 (snippet)

This repo comprises OSCAL component definition for the end-to-end demo. The OSCAL component definition is for CIS Benchmarks RHEL9 1.0.0 (snippet).

The demo overview.

Notes

1. data/CIS_Red_Hat_Enterprise_Linux_9_Benchmark_v1.0.0.xlsx is snippet from complete CIS Benchmark
2. data/oscap.csv provided by Vikas
3. data/Makefile creates:
   • component-definitions/RHEL9-1.0.0/component-definition.json (software from CIS Benchmark snippet)
   • component-definitions/oscap/component-definition.json (validation from oscap))

CTP rules

Remarks:

- 5.1.1 has no CIS Controls