sharang/compliance-scanner-agent
1
0
Fork 0
Code Issues 79 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

feat(oscal): assessment-results emitter + finding->control linker #211

Merged
sharang merged 1 commits from feat/oscal-assessment into main 2026-07-20 16:53:40 +00:00
Conversation 0 Commits 1 Files Changed 4
+412 -1
1 Commits
Author SHA1 Message Date
Sharang ParnerkarandClaude Opus 4.8 d5ff60d55a feat(core): OSCAL assessment-results emitter + finding->control linker
CI / Check (pull_request) Successful in 7m21s
Details
CI / Detect Changes (pull_request) Skipped
Details
CI / Deploy Agent (pull_request) Skipped
Details
CI / Deploy Dashboard (pull_request) Skipped
Details
CI / Deploy Docs (pull_request) Skipped
Details
CI / Deploy MCP (pull_request) Skipped
Details
CI / Check (push) Skipped 
Assess our findings against catalog controls and emit a standard OSCAL 1.1
assessment-results document — the assessment half of the loop (their catalog,
our assessment).

- ControlLinker maps a Finding's CWE -> catalog control-ids (CRA seed mirrors
  breakpilot's _CWE_TO_REQ; extensible via ControlLinker::new)
- assess() builds an observation per linked finding + a per-control
  'not-satisfied' finding; reviewed-controls covers the full catalog set
- deterministic: stable uuid5 ids (adds uuid "v5" feature) + caller-supplied
  timestamp; pure (no DB/network)
- 3 lib tests

Not yet wired into a scan run — that lands with the control-driven router (PR-4).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-20 18:26:01 +02:00