opencontrol-linter 0.1.3 → 0.1.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
|
-
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
2
|
+
SHA256:
|
3
|
+
metadata.gz: c357e597012b9d0a0d3e39d2142641b07da23a7a4b76c3f6354a7a7f71293b2a
|
4
|
+
data.tar.gz: 56ce59414bc589a19ea9c6d48be26fe7179c157693180314d03ac8bf7537e756
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 127982ea79db363912df7ae1c6e30dc148b3c7dc6d256d446892fbbb24262c31e2db38faf49ababcde44b51874d3aa8e9e99a1120f5f77d2ef8a453677ecd8dd
|
7
|
+
data.tar.gz: 86724dbdbda2d39d63239481b064a4c41bb68bf341bbad26fc50a11ce7e540e70a0a2bd432d280ead7e33019b71be342e6959d6794609e500340d72a912f9f1e
|
data/README.md
CHANGED
@@ -105,6 +105,26 @@ The following directory structure for compliance is typical. You can specify tho
|
|
105
105
|
|
106
106
|
```
|
107
107
|
|
108
|
+
## Installing a commit hook
|
109
|
+
|
110
|
+
A commit hook will run the linter before checkin and prevent checkin of unlinted
|
111
|
+
code.
|
112
|
+
|
113
|
+
```cassandraql
|
114
|
+
# Append the pre-comit hook using a here document
|
115
|
+
|
116
|
+
tee -a .git/hooks/pre-commit <<EOF
|
117
|
+
#!/bin/sh
|
118
|
+
# check the validity of OpenControl files
|
119
|
+
opencontrol-linter
|
120
|
+
EOF
|
121
|
+
|
122
|
+
# Ensure the hook is executable
|
123
|
+
|
124
|
+
chmod 755 .git/hooks/pre-commit
|
125
|
+
|
126
|
+
```
|
127
|
+
|
108
128
|
## Development
|
109
129
|
|
110
130
|
Clone this repo
|
data/lib/opencontrol/version.rb
CHANGED
@@ -3,7 +3,7 @@
|
|
3
3
|
module Opencontrol
|
4
4
|
# This module holds the Opencontrol Linter version information.
|
5
5
|
module Version
|
6
|
-
STRING = '0.1.
|
6
|
+
STRING = '0.1.4'.freeze
|
7
7
|
|
8
8
|
MSG = '%<version>s (using Parser %<parser_version>s, running on ' \
|
9
9
|
'%<ruby_engine>s %<ruby_version>s %<ruby_platform>s)'.freeze
|
@@ -0,0 +1,91 @@
|
|
1
|
+
documentation_complete: false
|
2
|
+
name: Amazon Elastic Compute Cloud
|
3
|
+
references:
|
4
|
+
- name: Reference
|
5
|
+
path: http://VerificationURL.com
|
6
|
+
type: URL
|
7
|
+
exposes_risk_surfaces:
|
8
|
+
- key: aws_east
|
9
|
+
type: physical
|
10
|
+
- key: aws_management_interface
|
11
|
+
type: logical
|
12
|
+
- key: application_interface
|
13
|
+
type: logical
|
14
|
+
satisfies:
|
15
|
+
- control_key: CM-2
|
16
|
+
covered_by:
|
17
|
+
- verification_key: EC2_Verification_1
|
18
|
+
- component_key: UAA
|
19
|
+
system_key: CloudFoundry
|
20
|
+
verification_key: UAA_Verification_1
|
21
|
+
protects_risk_surfaces:
|
22
|
+
- key: application_interface
|
23
|
+
type: logical
|
24
|
+
implementation_statuses:
|
25
|
+
- partial
|
26
|
+
- planned
|
27
|
+
control_origins:
|
28
|
+
- shared
|
29
|
+
- inherited
|
30
|
+
references:
|
31
|
+
- name: Reference2
|
32
|
+
path: http://VerificationURL2.com
|
33
|
+
type: URL
|
34
|
+
narrative:
|
35
|
+
- key: "a"
|
36
|
+
text: "Justification in narrative form A for CM-2"
|
37
|
+
- key: "b"
|
38
|
+
text: "Justification in narrative form B for CM-2"
|
39
|
+
standard_key: NIST-800-53
|
40
|
+
- control_key: 1.1
|
41
|
+
covered_by:
|
42
|
+
- verification_key: EC2_Verification_1
|
43
|
+
- component_key: UAA
|
44
|
+
system_key: CloudFoundry
|
45
|
+
verification_key: UAA_Verification_1
|
46
|
+
implementation_status: partial
|
47
|
+
control_origin: inherited
|
48
|
+
parameters:
|
49
|
+
- key: "a"
|
50
|
+
text: "Parameter A for 1.1"
|
51
|
+
- key: "b"
|
52
|
+
text: "Parameter B for 1.1"
|
53
|
+
narrative:
|
54
|
+
- key: "a"
|
55
|
+
text: "Justification in narrative form A for 1.1"
|
56
|
+
- key: "b"
|
57
|
+
text: "Justification in narrative form B for 1.1"
|
58
|
+
standard_key: PCI-DSS-MAY-2015
|
59
|
+
- control_key: 1.1.1
|
60
|
+
covered_by: []
|
61
|
+
implementation_status: partial
|
62
|
+
control_origin: inherited
|
63
|
+
narrative:
|
64
|
+
- key: "a"
|
65
|
+
text: "Justification in narrative form A for 1.1.1"
|
66
|
+
- key: "b"
|
67
|
+
text: "Justification in narrative form B for 1.1.1"
|
68
|
+
parameters:
|
69
|
+
- key: "a"
|
70
|
+
text: "Parameter A for 1.1.1"
|
71
|
+
- key: "b"
|
72
|
+
text: "Parameter B for 1.1.1"
|
73
|
+
standard_key: PCI-DSS-MAY-2015
|
74
|
+
- control_key: 2.1
|
75
|
+
covered_by: []
|
76
|
+
implementation_status: partial
|
77
|
+
control_origin: inherited
|
78
|
+
narrative:
|
79
|
+
- text: "Justification in narrative form for 2.1"
|
80
|
+
standard_key: PCI-DSS-MAY-2015
|
81
|
+
responsible_role: "AWS Staff"
|
82
|
+
schema_version: 3.1.0.surfaces
|
83
|
+
verifications:
|
84
|
+
- key: EC2_Verification_2
|
85
|
+
name: EC2 Governor 2
|
86
|
+
path: artifact-ec2-1.png
|
87
|
+
type: Image
|
88
|
+
- key: EC2_Verification_1
|
89
|
+
name: EC2 Verification 1
|
90
|
+
path: http://VerificationURL.com
|
91
|
+
type: URL
|
@@ -0,0 +1,162 @@
|
|
1
|
+
type: map
|
2
|
+
mapping:
|
3
|
+
name:
|
4
|
+
type: str
|
5
|
+
required: true
|
6
|
+
key:
|
7
|
+
type: str
|
8
|
+
system:
|
9
|
+
type: str
|
10
|
+
required: false
|
11
|
+
schema_version:
|
12
|
+
type: str
|
13
|
+
required: true
|
14
|
+
documentation_complete:
|
15
|
+
type: bool
|
16
|
+
exposes_risk_surfaces:
|
17
|
+
type: seq
|
18
|
+
sequence:
|
19
|
+
- type: map
|
20
|
+
mapping:
|
21
|
+
key:
|
22
|
+
type: str
|
23
|
+
type:
|
24
|
+
type: str
|
25
|
+
enum:
|
26
|
+
- physical
|
27
|
+
- logical
|
28
|
+
responsible_role:
|
29
|
+
type: str
|
30
|
+
references:
|
31
|
+
type: seq
|
32
|
+
sequence:
|
33
|
+
- type: map
|
34
|
+
mapping:
|
35
|
+
name:
|
36
|
+
type: str
|
37
|
+
required: true
|
38
|
+
path:
|
39
|
+
type: str
|
40
|
+
type:
|
41
|
+
type: str
|
42
|
+
required: true
|
43
|
+
verifications:
|
44
|
+
type: seq
|
45
|
+
sequence:
|
46
|
+
- type: map
|
47
|
+
mapping:
|
48
|
+
key:
|
49
|
+
type: str
|
50
|
+
required: true
|
51
|
+
name:
|
52
|
+
type: str
|
53
|
+
required: true
|
54
|
+
path:
|
55
|
+
type: str
|
56
|
+
type:
|
57
|
+
type: str
|
58
|
+
required: true
|
59
|
+
description:
|
60
|
+
type: str
|
61
|
+
test_passed:
|
62
|
+
type: bool
|
63
|
+
last_run:
|
64
|
+
type: any
|
65
|
+
satisfies:
|
66
|
+
type: seq
|
67
|
+
sequence:
|
68
|
+
- type: map
|
69
|
+
mapping:
|
70
|
+
standard_key:
|
71
|
+
type: text
|
72
|
+
required: true
|
73
|
+
control_key:
|
74
|
+
type: text
|
75
|
+
required: true
|
76
|
+
narrative:
|
77
|
+
required: true
|
78
|
+
type: seq
|
79
|
+
sequence:
|
80
|
+
- type: map
|
81
|
+
mapping:
|
82
|
+
key:
|
83
|
+
type: str
|
84
|
+
text:
|
85
|
+
type: str
|
86
|
+
required: true
|
87
|
+
references:
|
88
|
+
type: seq
|
89
|
+
sequence:
|
90
|
+
- type: map
|
91
|
+
mapping:
|
92
|
+
name:
|
93
|
+
type: str
|
94
|
+
required: true
|
95
|
+
path:
|
96
|
+
type: str
|
97
|
+
type:
|
98
|
+
type: str
|
99
|
+
required: true
|
100
|
+
control_origin:
|
101
|
+
desc: |
|
102
|
+
This field will be deprectated in future versions of the schema.
|
103
|
+
Please use control_origins.
|
104
|
+
type: str
|
105
|
+
control_origins:
|
106
|
+
type: seq
|
107
|
+
sequence:
|
108
|
+
- type: str
|
109
|
+
protects_risk_surfaces:
|
110
|
+
type: seq
|
111
|
+
sequence:
|
112
|
+
- type: map
|
113
|
+
mapping:
|
114
|
+
key:
|
115
|
+
type: str
|
116
|
+
type:
|
117
|
+
type: str
|
118
|
+
enum:
|
119
|
+
- physical
|
120
|
+
- logical
|
121
|
+
parameters:
|
122
|
+
type: seq
|
123
|
+
sequence:
|
124
|
+
- type: map
|
125
|
+
mapping:
|
126
|
+
key:
|
127
|
+
type: str
|
128
|
+
required: true
|
129
|
+
text:
|
130
|
+
type: str
|
131
|
+
required: true
|
132
|
+
implementation_status:
|
133
|
+
desc: |
|
134
|
+
This field will be deprectated in future versions of the schema.
|
135
|
+
Please use implementation_statuses.
|
136
|
+
type: str
|
137
|
+
enum:
|
138
|
+
- partial
|
139
|
+
- complete
|
140
|
+
- planned
|
141
|
+
- none
|
142
|
+
implementation_statuses:
|
143
|
+
type: seq
|
144
|
+
sequence:
|
145
|
+
- type: str
|
146
|
+
enum:
|
147
|
+
- partial
|
148
|
+
- complete
|
149
|
+
- planned
|
150
|
+
- none
|
151
|
+
covered_by:
|
152
|
+
type: seq
|
153
|
+
sequence:
|
154
|
+
- type: map
|
155
|
+
mapping:
|
156
|
+
system_key:
|
157
|
+
type: str
|
158
|
+
component_key:
|
159
|
+
type: str
|
160
|
+
verification_key:
|
161
|
+
type: str
|
162
|
+
required: true
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: opencontrol-linter
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.1.
|
4
|
+
version: 0.1.4
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Adrian Kierman
|
@@ -9,7 +9,7 @@ authors:
|
|
9
9
|
autorequire:
|
10
10
|
bindir: exe
|
11
11
|
cert_chain: []
|
12
|
-
date: 2019-03-
|
12
|
+
date: 2019-03-27 00:00:00.000000000 Z
|
13
13
|
dependencies:
|
14
14
|
- !ruby/object:Gem::Dependency
|
15
15
|
name: colorize
|
@@ -286,6 +286,7 @@ files:
|
|
286
286
|
- vendor/schemas/CONTRIBUTING.md
|
287
287
|
- vendor/schemas/README.md
|
288
288
|
- vendor/schemas/examples/component_v3.0.0.yaml
|
289
|
+
- vendor/schemas/examples/component_v3.1.0.surfaces.yaml
|
289
290
|
- vendor/schemas/examples/component_v3.1.0.yaml
|
290
291
|
- vendor/schemas/examples/opencontrol_v1.0.0.yaml
|
291
292
|
- vendor/schemas/kwalify/README.md
|
@@ -294,6 +295,7 @@ files:
|
|
294
295
|
- vendor/schemas/kwalify/component/v1.0.0.yaml
|
295
296
|
- vendor/schemas/kwalify/component/v2.0.0.yaml
|
296
297
|
- vendor/schemas/kwalify/component/v3.0.0.yaml
|
298
|
+
- vendor/schemas/kwalify/component/v3.1.0.surfaces.yaml
|
297
299
|
- vendor/schemas/kwalify/component/v3.1.0.yaml
|
298
300
|
- vendor/schemas/kwalify/opencontrol/v1.0.0.yaml
|
299
301
|
- vendor/schemas/kwalify/requirements.txt
|
@@ -330,7 +332,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
330
332
|
version: '0'
|
331
333
|
requirements: []
|
332
334
|
rubyforge_project:
|
333
|
-
rubygems_version: 2.
|
335
|
+
rubygems_version: 2.7.6
|
334
336
|
signing_key:
|
335
337
|
specification_version: 4
|
336
338
|
summary: Automatic open control linting tool.
|