Brandt Keller

### Steps to reproduce ``` lula generate component -c https://raw.githubusercontent.com/usnistgov/oscal-content/master/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json -r ac-1,ac-3,ac-3.2,ac-4 --component "other component" -o test.yaml ``` ### Expected result Component Definition written to `test.yaml` ### Actual Result Component...

### Is your feature request related to a problem? Please describe. `lula evaluate` is designed to be used to compare two assessments (a threshold assessment and a new assessment) and...

Tracking issue for: - [ ] https://github.com/defenseunicorns/lula/security/code-scanning/17

fix(generate): component generation fixed for many catalogs

2

## Description This fixes a nil pointer dereference error caught while testing the fedramp catalog generation. This also includes much better depth of control enumeration given how groups and controls...

The generate annotation is a quick reference for how to reproduce a component generated with `lula generate component`. This needs to be unique to a control-implementation instead of a component...

## Description Proposing the transition of the generation to a `control-implementation` props such that it can be discoverable and easily updated. Also introduces the `framework` flag as used in #327...

### Steps to reproduce ```bash dev@dev:~/work/lula$ ./bin/lula generate component -c https://raw.githubusercontent.com/GSA/fedramp-automation/93ca0e20ff5e54fc04140613476fba80f08e3c7d/dist/content/rev5/baselines/json/FedRAMP_rev5_HIGH-baseline-resolved-profile_catalog.json --component "Istio Controlplane" -r ac-14,ac-4,ac-4.21,ac-4.4,ac-6.3,ac-6.9,au-12,au-2,au-3,au-3.1,cm-5,sc-10,sc-13,sc-23,sc-3,sc-39,sc-4,sc-7.20,sc-7.21,sc-7.4,sc-7.8,sc-8,sc-8.1,sc-8.2 ``` ### Expected result Successful component generation ### Actual Result ```bash NOTE Saving log...

### Describe what should be investigated or refactored There are a couple disparate writing processes for Lula that we should consolidate into a common approach. Compose: - Without `-o` flag...

### Describe what should be investigated or refactored It is too easy to get into a habit of checking boxes - but also the content of each box should be...

### Is your feature request related to a problem? Please describe. Creation of a tools command to convert a given oscal file from one format to another (yaml/json) ### Describe...