Compliance-trestle

Latest version: v3.8.1

Safety actively analyzes 723685 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 3 of 16

3.1.0

Not secure
Chore

* chore: Merge back version tags and changelog into develop. ([`3d54f07`](https://github.com/oscal-compass/compliance-trestle/commit/3d54f07cad319cf6986dcc4c0abbbeec38b9bad7))

Feature

* feat: logo (1575)

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com> ([`b33490a`](https://github.com/oscal-compass/compliance-trestle/commit/b33490a24c93521568697fc582ae48bf4af71181))

* feat: modify task csv_to_oscal_cd to allow any case for heading in csv file (1573)

Signed-off-by: Ma1h01 <yihaomaigmail.com>
Co-authored-by: AleJo2995 <alejandro.leiva.palomoibm.com> ([`677c7ea`](https://github.com/oscal-compass/compliance-trestle/commit/677c7ea81d78c0d5356b3f0bb5b7563565a2938f))

Fix

* fix: correct semantic release behaviour (1564)

* fix: Update python-sem-ver

Signed-off-by: Chris Butler <chris.butlerredhat.com>

* fix: Update python semantic version to latest

Signed-off-by: Chris Butler <chris.butlerredhat.com>

* fix: Add uploading details

Signed-off-by: Chris Butler <chris.butlerredhat.com>

* fix: Add uploading details

Signed-off-by: Chris Butler <chris.butlerredhat.com>

* fix: clean up comments

Signed-off-by: Chris Butler <chris.butlerredhat.com>

---------

Signed-off-by: Chris Butler <chris.butlerredhat.com>
Co-authored-by: AleJo2995 <alejandro.leiva.palomoibm.com> ([`064274d`](https://github.com/oscal-compass/compliance-trestle/commit/064274d09b999767f0c5c58fbe854214f5674c43))

Unknown

* Merge pull request 1582 from oscal-compass/develop

chore: release ([`d068eb4`](https://github.com/oscal-compass/compliance-trestle/commit/d068eb406eab240e7bd8eb648a35eb3e51c2a6c9))

3.0.1

Not secure
Breaking

* fix: updated README.md - breaking change (1566)

BREAKING CHANGE: for new release

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com> ([`7397105`](https://github.com/oscal-compass/compliance-trestle/commit/739710572f7d62a390b3a71fe3d06f080dfc8ebe))

Chore

* chore: Merge back version tags and changelog into develop. ([`6635584`](https://github.com/oscal-compass/compliance-trestle/commit/66355845add54147edbb613cf2e4acb45ba37162))

* chore: Merge back version tags and changelog into develop. ([`72717f2`](https://github.com/oscal-compass/compliance-trestle/commit/72717f2eff7a7beb726c5d7abd5052496624e7d7))

Documentation

* docs: updates communication details in README.md (1537)

* docs: updates communication details in README.md

This is a seperate meeting/communication channel
from the Compliance WG adding new meeting details and slack channel

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* docs: add meeting notes link

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* fix: correct conversion link

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct lint error

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

---------

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>
Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>
Co-authored-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com> ([`eb459a2`](https://github.com/oscal-compass/compliance-trestle/commit/eb459a292abb7251ee6d321a81d46d041f2a9b0a))

Feature

* feat: oscal nist upgrade (1550)

* feat: support for latest OSCAL Version upgrade

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* feat: support OSCAL 1.1.2 (1533)

* fix: hack component schema, moving metadata location to same as other
models

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: add large line-length specification to pyptroject.toml for
datamodel-codegen

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* doc: discourse on changes made.

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix - automate schema metadata relocation in comp-def

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: undo fwd refs

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: HowMany

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: update gen_oscal.md with info on automated schema relocations

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: isolate schema fixup code

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: preprocess improved move metadata & assign Type4

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix implementations move to common issues

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* OSCAL_VERSION 1.1.2

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* dynamic year for copyright

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: reorder by name pre-processing; some post-processing (hacking)

397 failed, 738 passed, 3 skipped, 34 warnings, 68 errors

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: code format/lint

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* hack: reduce failed/errors

386 failed, 785 passed, 3 skipped, 34 warnings, 32 errors

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: hack for EmailAddressDatatype

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: issue hack warning/info

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: handle special case of &34;id: TokenDatatype&34; in catalog

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: introduce schema patching and employ for email-address and
parameter-selection

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: handle RiskStatus properly when applying renaming

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* code format & lint

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: validation error for Base64

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix AttributeError: module &39;trestle.oscal.ssp&39; has no attribute &39;Status&39;

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix AttributeError: &39;StringDatatype&39; object has no attribute &39;strip&39;

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix Origin vs. Origin1

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* Add Observation to assessment_results from common

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix value is not a valid enumeration member

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: import__test.py::test_import_wrong_oscal_version

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* patch schemas to rename “status” to “objectiveStatus” to avoid conflict

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* patch POAM schema to make RelatedObservation same as the other models

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix base 64 issue

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: determine common TaskValidValues, ThreatIdValidValues

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: improve pre-process reordering; handle special cases & valid values

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: nist content ssp example has moved and changed

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: OSCAL version in data/tasks/xlsx/output/profile.json

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix tests/trestle/tasks/oscal_catalog_to_csv_test.py::test_execute

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: code generation of URIReferenceDatatype

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix test_xlsx_execute_with_missing_rule_name_id

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix tests/trestle/tasks/xlsx_to_oscal_profile_test.py

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix tests/trestle/tasks/csv_to_oscal_cd_test.py

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix tests/trestle/tasks/ocp4_cis_profile_to_oscal_cd_test.py

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: test_generate_sample_model - OscalVersion

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix TypeError: unhashable type: &39;WithId&39;

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: logger.warn deprecation

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix :test_profile_alter_props - &39;str&39; object has no attribute &39;value&39;

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: AssertionError: assert StringDatatype(__root__=&39;1.1.2&39;) == &39;1.1.2&39;

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix lint error

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: get rid of python 3.7 use (hopefully)

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: sonar exclude generated code (hopefully)

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix direct hack of NIST schema for EmailAddress (handle in “normalizer”)

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix direct hack of NIST schema for Selection (HowMany)

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: add common valid values integrity check

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* rectification of property name changes (objective_status, originations)

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* TelephoneType and AddressType valid values

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* ExternalScheme and DocumentScheme valid values

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* DefinedComponentType valid values

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* SystemComponentType valid values

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* code comments

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* simplify pre-process code

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* simplify

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* remove unused code

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* replace deprecated pkg_resources with importlib_resources

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* Add python 3.10 to matrix

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* python 3.9, 3.10, 3.11

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* flake8 fix?

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* rename trestle.core.commands.author.profile to prof - lint shadow issue

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* update docs for change from author profile -> prof

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* add comments explaining refs creation in schema preprocessing

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* switch to pydantic latest version, but force v1 interface use for now

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: remedy 17 test warning by removing semantic release install

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* make sonar happy

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* make sonar happy

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* make sonar happy

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* use trestle.oscal.common.HowMany.one

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* supported versions of python are 3.9, 3.10. 3.11

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* reduce some duplication, as per reviewer&39;s comments.

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: remove unused parameters, per reviewer comments.

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* revise imports per reviewer suggestion.

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* 2.7.0

Automatically generated by python-semantic-release

* restore python-semantic-release==7.33.2 to cfg (at old level, for now)

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* Remove &34;We&39;ve moved&34; from README

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: handle allOf construct (1546)

* fix: handle allOf construct

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* How did .value get removed in 2 places??

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: merge & modify

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* test use of PositionValidValues as both string and enum

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* make flake8 happy

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: unify create_refs + body integrity check

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* remove use of extraneous constants

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

---------

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

---------

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>
Co-authored-by: semantic-release <semantic-release>

* remove extraneous workflow lines of code (1555)

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* Improve comments in new schema pre-processing module

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* upgrade cmarkgfm version

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* cmarkgfm==0.8.*

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* trestle version should not be updated by hand!

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* cmarkgfm==0.6.*

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* remove 1.1.2 from dir name & use tmp folder for fixup schemas

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* cmarkgfm==0.8.* works locally...

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* cmarkgfm==2024.1.* works locally

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* pydantic >= 2.0.0

* remove extraneous optional specifications

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

---------

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>
Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>
Co-authored-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com> ([`82caf5f`](https://github.com/oscal-compass/compliance-trestle/commit/82caf5fe08796e10532410299d2032b2be7e7d61))

Fix

* fix: reverting last serm ver changes

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com> ([`9df0703`](https://github.com/oscal-compass/compliance-trestle/commit/9df0703aa925af836a8e07dcb45ed6db31daae11))

* fix: revert sem release changelog and version

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com> ([`01427df`](https://github.com/oscal-compass/compliance-trestle/commit/01427df909cb8e3a25d46ba8e3c9049533d65a6b))

* fix: correct sonar quality checks (1568)

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com> ([`7f93f86`](https://github.com/oscal-compass/compliance-trestle/commit/7f93f86ac384d3c68b801a24e166fd1774c31103))

* fix: remove obsolete text, fix broken links, fix spelling (1565)

* fix: remove obsolete text, fix broken links, fix spelling

Signed-off-by: semantic-release (via Github actions) <semantic-releasegithub-actions>

* fix: revised important note

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* make mdformat happy.

Signed-off-by: Lou Degenaro <lou.degenarogmail.com>

---------

Signed-off-by: semantic-release (via Github actions) <semantic-releasegithub-actions>
Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>
Signed-off-by: Lou Degenaro <lou.degenarogmail.com>
Co-authored-by: semantic-release (via Github actions) <semantic-releasegithub-actions> ([`0955b4b`](https://github.com/oscal-compass/compliance-trestle/commit/0955b4b23537ea7d19d3902a7ff9e7c7e442a135))

* fix: BREAKING CHANGE (1560)

* fix: BREAKING CHANGE

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: BREAKING CHANGE

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct wording

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

---------

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com> ([`f714b12`](https://github.com/oscal-compass/compliance-trestle/commit/f714b12d179a2e83f9ef4c1904668a67ed936c3f))

* fix: zoom link (1530)

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com> ([`95ff6b7`](https://github.com/oscal-compass/compliance-trestle/commit/95ff6b7f53ab325ec106c47d28a44f5e70f5f964))

Unknown

* Merge pull request 1567 from oscal-compass/develop

chore: Trestle release ([`c8be4ab`](https://github.com/oscal-compass/compliance-trestle/commit/c8be4ab948db048c8e3802b890abedc7de8733bc))

2.6.1

Not secure
Chore

* chore: Merge back version tags and changelog into develop. ([`11fbcda`](https://github.com/oscal-compass/compliance-trestle/commit/11fbcdaeb1173ba131c20df6ba5be66bfc997b23))

Fix

* fix: correct vuln for cryptography (1520)

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com> ([`353cc2b`](https://github.com/oscal-compass/compliance-trestle/commit/353cc2b75e611b9d851cca2022f4e0fbe2936d16))

Unknown

* Merge pull request 1521 from oscal-compass/develop

chore: Trestle release ([`f097029`](https://github.com/oscal-compass/compliance-trestle/commit/f097029392963643932f471dbc7c1e6baec91896))

2.6.0

Not secure
Chore

* chore: Merge back version tags and changelog into develop. ([`6b2412e`](https://github.com/oscal-compass/compliance-trestle/commit/6b2412e7e0e34fdc32a5e1af06c3bdc46a7687e8))

Feature

* feat: multiple parms per rule (1499)

* feat: multiple parameters per rule

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: use correct columns names list

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: add test for multi-parameters per rule

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: a bit more on parameter sets in the help

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: code smell

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: test for modification to additional parameter set value

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: test for delete of additional param set

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

---------

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com> ([`218ffe4`](https://github.com/oscal-compass/compliance-trestle/commit/218ffe47a879e8bbca115bd956cfc9e99bbc5751))

Fix

* fix: add multiple parameters per rule support on component definition (1504)

* fix: add multiple parameters per rule in component definition

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct code linting errors

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: adding more testing

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: add a value for the rule parameter in tests

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct tests and add code for dup components validation

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct quality gate error

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct typo and fix test description

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct typo

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

---------

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com> ([`96e3f02`](https://github.com/oscal-compass/compliance-trestle/commit/96e3f02fc597ded59ed11f5bd2b07aa2c0ccb504))

* fix: community call (1516)

* fix: update community call information

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: removing unneded separators

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: community meetings

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: agenda and notes

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: use every other Tue.; add login notes & calendar link

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: make mdformat happy.

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: update calendar info

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: add a passcode to zoom meeting

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct wording for zoom login

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct format check

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: rephrase login options

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

---------

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>
Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>
Co-authored-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com> ([`53d7fd4`](https://github.com/oscal-compass/compliance-trestle/commit/53d7fd484bdd42e22ff58e3244da732835c2cfea))

* fix: correct vulnerability (1509)

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>
Co-authored-by: mrgadgil <49280244+mrgadgilusers.noreply.github.com> ([`4f70e0a`](https://github.com/oscal-compass/compliance-trestle/commit/4f70e0af0e4063ac3cd763ff0c7e319168c0d805))

* fix: add check for empty label to fix failure for statement with no label property (1507)

* test: adds test for ssp assemble with fedramp profile

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* fix: adds fix for parts with no label during ssp-assemble

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* fix: don&39;t put empty label into map

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: make sonar happy -> reduce complexity

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

---------

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>
Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>
Co-authored-by: Lou DeGenaro <lou.degenarogmail.com> ([`55ed462`](https://github.com/oscal-compass/compliance-trestle/commit/55ed462107d577efc9099b8ed59c5718eee9e47c))

Unknown

* Merge pull request 1519 from oscal-compass/develop

chore: Trestle release ([`1987260`](https://github.com/oscal-compass/compliance-trestle/commit/198726001c6ea1911b11c1757f219eca032a46ad))

2.5.1

Not secure
Chore

* chore: Merge back version tags and changelog into develop. ([`64c819a`](https://github.com/oscal-compass/compliance-trestle/commit/64c819a3b76acb3fb06396afc1f7fe2897ec1dab))

Fix

* fix: correct security vulnerability (1498)

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com> ([`e23792c`](https://github.com/oscal-compass/compliance-trestle/commit/e23792cb1cde490fa2951866c9f99f9d43e9c669))

Unknown

* Merge pull request 1501 from oscal-compass/develop

chore: Trestle release ([`7966956`](https://github.com/oscal-compass/compliance-trestle/commit/79669569572b8777c3ef1b1b6663c99af4002bff))

2.5.0

Not secure
Chore

* chore: Merge back version tags and changelog into develop. ([`5ac3067`](https://github.com/oscal-compass/compliance-trestle/commit/5ac3067ad2e81eb3b0d31f2d3f05a12b44ec1072))

Feature

* feat: add parameter value origin field to parameters (1470)

* feat: add parameter value origin field to parameters

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: remove wrong added field from oscal model

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: add param_value_origin to props and add validations

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct ci

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct param value origin cycle

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct profile-param-value-origin flow

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: adding final corrections and test for inherited param-value-origin

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct formating

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: add step to ignore param-value-origin if no replacement was done in profile-param-value-origin

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct code format

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct tests

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: use replace me placeholder instead of literal text

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: use replace me tag in default value for param-value-origin

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correct code format

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

---------

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com> ([`b86aa2b`](https://github.com/oscal-compass/compliance-trestle/commit/b86aa2b5ef97a8fd988efb8ec995fb0624af6db0))

* feat: allow use of OpenSCAP result files in task xccdf_result_to_oscal_ar (1411)

* feat: Allow use of OpenSCAP result files in task xccdf_result_to_oscal_ar

Before this commit if you wanted to use result files from OpenSCAP
in the task xccdf_result_to_oscal_ar you had to extract the
`TestResult` element and place it as the root of the XML
document, otherwise the resulting OSCAL document would be
blank. Thus making it impossible to directly use output from
OpenSCAP with the task.

With this commit the task will detect that the root element
is not `TestResult` and then it will find the `TestResult`
element in the XML document. This allows the use of files
created by OpenSCAP using the `--results` and `--results-arf`
switches.

Signed-off-by: Matthew Burket <mburketredhat.com>

* Add tests for OpenSCAP results files for task xccdf_result_to_oscal_ar_test

Signed-off-by: Matthew Burket <mburketredhat.com>

---------

Signed-off-by: Matthew Burket <mburketredhat.com> ([`eeb715c`](https://github.com/oscal-compass/compliance-trestle/commit/eeb715c4cd86c3bd5183592c03beac1cc46859d9))

* feat: add inheritance view to ssp-generate and ssp-assemble (1441)

* feat: adds ability to process exports from SSP and write Markdown by component

Adds ExportInterface and ExportWriter classes
Adds Markdown generation to ssp-generate
Add MarkdownWriter for leveraged statements

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>
Signed-off-by: Alex Flom <alexander.flomgmail.com>

* feat: adds InheritanceMarkdownReader for reading leveraged statement markdown

Adds InheritanceMarkdownReader for processing into a leveraging SSP context
Adds persistance for components and satisified statements during updates
Changes leveraging component from a single dictionary to a list

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* feat: Adds reader class for inheritance markdown

Adds ExportReader class
Removes ExportInterface class
Adds a single ByComponentInterface class to interact with the model
in terms of inheritance

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

Co-authored-by: Jennifer Power <barnabei.jennifergmail.com>

* docs: updates documentation with usage and API references updates for inheritance

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* chore: updates AgileAuthoring class for ssp-generate arg changes

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* docs: updates returns section in InheritanceMarkdownReader docstring

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* fix: updates line length on return statement in InheritanceMarkdownReader

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* refactor: updates markdown heading and comment strip function to remove regex

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* test: adds inheritance view testing for ssp-assemble

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* chore: adds more context to ExportReader class comments

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* feat: updates ssp-generate to filter control implementation for leveraged_ssp

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* refactor: updates ExportWriter to reduce code duplication

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* fix: updates ExportReader to add new statements if present in the inheritance view

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* fix: update logging to debug in ExportReader

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* refactor: simplify code in read_exports_from_markdown

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* tests: simplify tests for ExportReader test data generation

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* refactor: reduce code duplication in ExportReader methods

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* fix: allows inheritance info to be removed when component is unmapped

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* feat: adds leveraged authorization updates to system implementation

Adds SSPInheritanceAPI class for interacting with leveraged auth
information

Adds trestle global tags to markdown to store SSP location info

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

Co-authored-by: Alex Flom <alexander.flomgmail.com>

* docs: add docs updates for SSPInheritanceAPI class

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* chore: updates warning message for leveraged authorization with comps

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* fix: updates ssp-assemble to ensure existing leveraged comps persist

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* fix: adds fixes to address PR feedback

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

* refactor: polishes SSPInheritanceAPI class to reduce complexity

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>

---------

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com>
Signed-off-by: Alex Flom <alexander.flomgmail.com>
Co-authored-by: Alex Flom <aflomredhat.com>
Co-authored-by: Alex Flom <alexander.flomgmail.com> ([`6cf498b`](https://github.com/oscal-compass/compliance-trestle/commit/6cf498b26aa2a2d583714470038291b0567fb80a))

Fix

* fix: correct empty values going in assembled profile (1491)

* fix: correct empty values going in assembled profile

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: add test case to check profile values replaced

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

---------

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com> ([`136b712`](https://github.com/oscal-compass/compliance-trestle/commit/136b712cfaf0392ae5673a6103700014d27b2866))

* fix: correct vulnerability (1486)

* fix: correct critical vulnerability

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

* fix: correcting vulnerability

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

---------

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com> ([`4610d24`](https://github.com/oscal-compass/compliance-trestle/commit/4610d247516c7ddc37a1b1774b31fbfb9f5012fa))

* fix: move to new org (1483)

* fix: move to new org

github.com/IBM -> github.com/oscal-compass
ibm.github.io -> oscal-compass.github.io

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: run make mdformat

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: correct missing org changes

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>

---------

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>
Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com>
Co-authored-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com> ([`c456779`](https://github.com/oscal-compass/compliance-trestle/commit/c4567792cc62b7e9e85c8dca0ce2d26fe82fcbc6))

* fix: sonar (1481)

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com> ([`4e7e8fd`](https://github.com/oscal-compass/compliance-trestle/commit/4e7e8fd6618852dcceb4b464a7cabc91154e171a))

* fix: correct critical vulnerability (1479)

Signed-off-by: Alejandro Jose Leiva Palomo <alejandro.leiva.palomoibm.com> ([`72b0f6f`](https://github.com/oscal-compass/compliance-trestle/commit/72b0f6f132fe7f6ed20fd29e47e13656082c0d29))

* fix: link main readme to agile authoring setup repo (1477)

* fix: link main readme to agile authoring setup repo

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

* fix: docs validate

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com>

---------

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com> ([`88c1606`](https://github.com/oscal-compass/compliance-trestle/commit/88c16064897644db03aab11799a6dfc31ec8a1d2))

* fix(tests): pins oscal-content references in tests the latest 1.0 commit (1474)

Signed-off-by: Jennifer Power <barnabei.jennifergmail.com> ([`0dc7551`](https://github.com/oscal-compass/compliance-trestle/commit/0dc755184fb8c061cacc90cc930ea7b0c43f2b7c))

Unknown

* Merge pull request 1492 from oscal-compass/develop

chore: Trestle release ([`e6c42fa`](https://github.com/oscal-compass/compliance-trestle/commit/e6c42fad64855796fe21ca082cfc1c9fa879a2e9))

* fix - trestle direct dependency on requests pkg (1488)

Signed-off-by: Lou DeGenaro <lou.degenarogmail.com> ([`c112f9c`](https://github.com/oscal-compass/compliance-trestle/commit/c112f9cf1ec9ff5228b58a4383beb5f9684b9591))

Page 3 of 16

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.