ComplianceAsCode / ComplianceAsCode/oscal-content

Duplicate ID Violations Between Controls and Groups Causing Validation Failures

Open
#104 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
7
Forks
7
PR merge metrics
No merged PRs in 30d

Description

## Description

Multiple catalogs in this repository contain duplicate IDs values between control and group elements, violating OSCAL's requirement for unique identifiers across all controls, groups, and parts within a catalog document. This was identified using the [metaschema-framework/oscal-cli](https://github.com/metaschema-framework/oscal-cli) and the command:

```
oscal-cli catalog validate /path/to/your-catalog.json
```

## Error Example

>[ERROR] [/catalog/group[80]/control[1]] Index 'catalog-groups-controls-parts' has duplicate key for items at paths '/catalog/group[80]' and '/catalog/group[80]/control[1]

## Affected catalogs:

- anssi
- ccn_rhel9
- cis_fedora
- cis_ocp
- cis_rhel10
- cis_rhel8
- cis_rhel9
- e8
- ism_o
- stig_rhel8
- stig_rhel9

## References:

* [Source of the index requirement in the oscal catalog metaschema](https://github.com/usnistgov/OSCAL/blob/b39789e5ab6df36dbe14f481e40113b91fd25f3f/src/metaschema/oscal_catalog_metaschema.xml#L60)
* [Definition of index constraint in the metaschema docs](https://pages.nist.gov/metaschema/specification/syntax/constraints/#index-constraints)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.