ComplianceAsCode / ComplianceAsCode/oscal-content
Duplicate ID Violations Between Controls and Groups Causing Validation Failures
- Dominant language
- Shell
- Stars
- 7
- Forks
- 7
- PR merge metrics
- No merged PRs in 30d
Description
## Description
Multiple catalogs in this repository contain duplicate IDs values between control and group elements, violating OSCAL's requirement for unique identifiers across all controls, groups, and parts within a catalog document. This was identified using the [metaschema-framework/oscal-cli](https://github.com/metaschema-framework/oscal-cli) and the command:
```
oscal-cli catalog validate /path/to/your-catalog.json
```
## Error Example
>[ERROR] [/catalog/group[80]/control[1]] Index 'catalog-groups-controls-parts' has duplicate key for items at paths '/catalog/group[80]' and '/catalog/group[80]/control[1]
## Affected catalogs:
- anssi
- ccn_rhel9
- cis_fedora
- cis_ocp
- cis_rhel10
- cis_rhel8
- cis_rhel9
- e8
- ism_o
- stig_rhel8
- stig_rhel9
## References:
* [Source of the index requirement in the oscal catalog metaschema](https://github.com/usnistgov/OSCAL/blob/b39789e5ab6df36dbe14f481e40113b91fd25f3f/src/metaschema/oscal_catalog_metaschema.xml#L60)
* [Definition of index constraint in the metaschema docs](https://pages.nist.gov/metaschema/specification/syntax/constraints/#index-constraints)
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.