compliance-trestle
compliance-trestle copied to clipboard
trestle author ssp-generate does not seem to do the correct thing with `aggregates` parameters
Describe the bug
For aggregates
parameters (such as si-7_prm_1
from https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json) ssp-generate is showing a warning about the parameter has no values and was referenced by prose
and the markdown ends up with the label
field inserted, rather than the values aggregated from si-07_odp.01
, si-07_odp.02
, and si-07_odp.03
.
To Reproduce
Steps to reproduce the behavior:
- Import the following profile: profile.json
- Run
trestle author ssp-generate -p imported-profile -o markdown
- Note the warnings about values
- Open the
markdown/si-7.md
file - See that the content from the various parameters are set in the assessment objective section, but not in the control statement
Expected behavior
I'd expect there to be no warning about missing values, since the individual aggregated parameters are present, and the control statement output to reference the set parameters instead of the generic catalog label.
Environment
- OS: macOS / Docker
- Python version: python-3.11.9-slim docker image
- Installed packages: trestle 3.2.0