ComplianceAsCode / ComplianceAsCode/content
Build system does not check if OVAL definition ID, generated from a template, is in sync with the rule (or platform)
- Dominant language
- Shell
- Stars
- 2.8k
- Forks
- 828
- Avg merge
- 3d 8m
- Merged PRs (30d)
- 80
Description
#### Description of problem:
When id of the `definition` in a rule template does not match the Rule id OVAL check is silently not added to the Rule definition.
When the same happens with a platform (the id of the `definition` does not match platform's `check_id` or auto-generated id based on the template name) the `cpe-lang:platform` element receives incorrect link to the OVAL without a warning, resulting in a scan-time error: ```No definition with ID: oval:ssg-mount_tmp:def:1 in result model.```.
#### SCAP Security Guide Version:
master
#### Operating System Version:
N/A
#### Steps to Reproduce:
1. Add prefix to the id in a template: ``````
2. Build content
3. Perform the scan
#### Actual Results:
Rule is not evaluated
#### Expected Results:
Build-time warning
#### Additional Information/Debugging Steps:
Related to: #10440, #10446
Contributor guide
Assessment
This issue has not been assessed yet.