Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

inspec.yml STIG Benchmark ID is wrong #278

Open
blac9216 opened this issue Jan 2, 2025 · 0 comments
Open

inspec.yml STIG Benchmark ID is wrong #278

blac9216 opened this issue Jan 2, 2025 · 0 comments
Labels
bug Something isn't working

Comments

@blac9216
Copy link

blac9216 commented Jan 2, 2025

Describe the bug

The inspec profiles have the wrong name for the Benchmark ID meaning that if you use saf cli to produce CKLs they don't align with the standard from the original XCCDF.
The Current inspec.yml for the ESXi stig (for example) reads:

---
name: VMware vSphere 8.0 ESXi STIG
title: VMware vSphere 8.0 ESXi STIG
maintainer: Broadcom
copyright: Broadcom
copyright_email: [email protected]
license: Apache-2.0
summary: An InSpec Compliance Profile
version: 2.0.1

Where is should be:

---
name: VMW_vSphere_8-0_ESXi_STIG
title: VMware vSphere 8.0 ESXi Security Technical Implementation Guide
maintainer: Broadcom
copyright: Broadcom
copyright_email: [email protected]
license: Apache-2.0
summary: An InSpec Compliance Profile
version: 2.0.1

To be compatible with programs and scripts that expect the original Benchmark ID

Reproduction steps

try to use CKLs generated by the inspec runners and other HDL json converted to CKL with saf cli

Expected behavior

Benchmark IDs align with the original XCCDF for compatability

Additional context

No response

@blac9216 blac9216 added the bug Something isn't working label Jan 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant