openscap-daemon icon indicating copy to clipboard operation
openscap-daemon copied to clipboard

[RFE] Add rule IDs and CCEs to results

Open jan-cerny opened this issue 8 years ago • 0 comments

We want that Atomic scan stdout is similar to stdout are produced by oscap xccdf eval, we would like to add XCCDF IDs and CCEs there, and maybe something more.

This needs to be implemented on openscap-daemon side. The Daemon saves its results to a JSON. However, there is only rule name, severity, and XCCDF result. It looks easy to add XCCDF IDs and CCEs, because we already parse ARF to get the results.

Note: We have to realise we can't add to our output passed rules (or not applicable rules), because Atomic is designed to report only findings and vulnerabilities. Atomic scan doesn't report passed checks. Atomic scan is universal interface, used by other scanners, so we shouldn't break it.

jan-cerny avatar Aug 17 '17 07:08 jan-cerny