ComplianceAsCode / ComplianceAsCode/content

Build system does not check if OVAL definition ID, generated from a template, is in sync with the rule (or platform)

Open
#10,443 0 comments 0 reactions 0 assignees View on GitHub
CPE-AL Infrastructure OVAL triaged
Dominant language
Shell
Stars
2.8k
Forks
828
Avg merge
3d 8m
Merged PRs (30d)
80

Description

#### Description of problem:

When id of the `definition` in a rule template does not match the Rule id OVAL check is silently not added to the Rule definition.

When the same happens with a platform (the id of the `definition` does not match platform's `check_id` or auto-generated id based on the template name) the `cpe-lang:platform` element receives incorrect link to the OVAL without a warning, resulting in a scan-time error: ```No definition with ID: oval:ssg-mount_tmp:def:1 in result model.```.

#### SCAP Security Guide Version:

master

#### Operating System Version:

N/A

#### Steps to Reproduce:

1. Add prefix to the id in a template: ``````
2. Build content
3. Perform the scan

#### Actual Results:

Rule is not evaluated

#### Expected Results:

Build-time warning

#### Additional Information/Debugging Steps:

Related to: #10440, #10446

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.