create an ARF to HDF mapper

[sophos-billm]

From a SCAP compatibility perspective, the standard output from tools could potentially use the Asset Reporting Format (ARF). A mapper, somewhat similar to the XCCDF-to-HDF mapper, would be useful.

Some caveats/information:

• An ARF could include multiple report-request elements, each containing 1..n data-stream-collection's
• An ARF could then include multiple report elements, containing XCCDF TestResult elements, each with a reference to the evaluated Benchmark in a datastream.

I'm sure I'm forgetting something, but hopefully this will start the conversation.

[aaronlippold]

Agreed, we will likely go in both directions, hdf2arf as well.

https://csrc.nist.gov/schema/asset-reporting-format/1.1/asset-reporting-format_1.1.0.xsd

[aaronlippold]

https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/arf

[sophos-ryan]

Upvote

[rathbunr]

Old open issue, any traction? Was looking to do this recently.