OpenSCAP

[edit]

• Overview
• Details
• About this entry

OpenSCAP

https://www.open-scap.org/
Open Source Security Compliance Solution

From their repo: The oscap program is a command line tool that allows users to load, scan, validate, edit, and export SCAP documents.

OpenSCAP uses SCAP which is a line of specifications maintained by the NIST. SCAP was created to provide a standardized approach for maintaining system security. New specifications are governed by NIST’s SCAP Release cycle in order to provide a consistent and repeatable revision workflow. OpenSCAP mainly processes the XCCDF which is a standard way of expressing a checklist content and defines security checklists. It also combines with other specifications such as CPE, CCE and OVAL to create a SCAP-expressed checklist that can be processed by SCAP-validated products. For more information about the SCAP please refer to SCAP Standards.

Download

VCS Checkout

git clone https://github.com/OpenSCAP/openscap

Categories

• Internet-application:security
• Runs-on:GNU/Linux
• Security:system
• Use:security

Licensing

License

Verified by

Verified on

Notes

License

LGPL-2.1-or-later

Verified on

24 April 2021

Leaders and contributors

Resources and communication

Software prerequisites

Entry

"LGPL-2.1-or-later" is not in the list (ACEL, AFL-3.0, AGPL-1.0, AGPL-1.0-or-later, AGPL-3.0, AGPL-3.0-or-later, AGPL-3.0-or-later-with-exception, AGPL-3.0-with-exception, AGPLv1orlater, AGPLv3, ...) of allowed values for the "License" property.

Property "Submitted by" (as page type) with input value "{{{Submitted by}}}" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process. "{{{Submitted date}}}" contains an extrinsic dash or other characters that are invalid for a date interpretation.