stig

type ChangeClassification string

type Characteristics struct {
	UsesSOAP              bool   `yaml:"uses_soap"`
	UsesSAML              bool   `yaml:"uses_saml"`
	UsesXML               bool   `yaml:"uses_xml"`
	UsesDatabase          bool   `yaml:"uses_database"`
	UsesPasswords         bool   `yaml:"uses_passwords"`
	UsesPKI               bool   `yaml:"uses_pki_cac"`
	ProcessesClassified   bool   `yaml:"processes_classified_data"`
	ProcessesCUI          bool   `yaml:"processes_cui"`
	HasUserInput          bool   `yaml:"has_user_input"`
	HasAdminInterface     bool   `yaml:"has_admin_interface"`
	HasFileUpload         bool   `yaml:"has_file_upload"`
	IsStateless           bool   `yaml:"is_stateless"`
	HasMobileCode         bool   `yaml:"has_mobile_code"`
	IsHighAvailability    bool   `yaml:"is_high_availability"`
	IsPubliclyAccessible  bool   `yaml:"is_publicly_accessible"`
	HasWebServices        bool   `yaml:"has_web_services"`
	HasSharedAccounts     bool   `yaml:"has_shared_accounts"`
	HasNonLocalMaint      bool   `yaml:"has_non_local_maintenance"`
	DoesKeyExchange       bool   `yaml:"does_key_exchange"`
	IsTransactionBased    bool   `yaml:"is_transaction_based"`
	IsConfigMgmtApp       bool   `yaml:"is_config_mgmt_app"`
	AuthenticatesDevices  bool   `yaml:"authenticates_devices"`
	HasCryptoModuleAccess bool   `yaml:"has_crypto_module_access"`
	InDoDDMZ              bool   `yaml:"in_dod_dmz"`
	IsCritical            bool   `yaml:"is_critical"`
	HostsNonOrgUsers      bool   `yaml:"hosts_non_org_users"`
	DevelopedInHouse      bool   `yaml:"developed_in_house"`
	Language              string `yaml:"language"`

	IsVirtualMachine     bool `yaml:"is_virtual_machine"`
	IsContainerHost      bool `yaml:"is_container_host"`
	IsKubernetesNode     bool `yaml:"is_kubernetes_node"`
	IsStandaloneServer   bool `yaml:"is_standalone_server"`
	HasGUI               bool `yaml:"has_gui"`
	BootsToMultiUser     bool `yaml:"boots_to_multi_user_target"`
	InteractiveConsole   bool `yaml:"interactive_console_present"`
	HasLocalUsers        bool `yaml:"has_local_interactive_users"`
	IsDomainJoined       bool `yaml:"is_domain_joined"`
	UsesFIPSMode         bool `yaml:"uses_fips_mode"`
	UsesSELinux          bool `yaml:"uses_selinux"`
	UsesAuditd           bool `yaml:"uses_auditd"`
	UsesJournald         bool `yaml:"uses_journald"`
	UsesTimeSync         bool `yaml:"uses_time_sync"`
	UsesCryptoPolicy     bool `yaml:"uses_crypto_policy"`
	UsesFirewall         bool `yaml:"uses_firewall"`
	UsesSSH              bool `yaml:"uses_ssh"`
	UsesSudo             bool `yaml:"uses_sudo"`
	UsesAIDE             bool `yaml:"uses_aide"`
	UsesEncryptedStorage bool `yaml:"uses_encrypted_storage"`
	UsesIPv6             bool `yaml:"uses_ipv6"`
	PermitsWireless      bool `yaml:"permits_wireless"`
	UsesRemovableMedia   bool `yaml:"uses_removable_media"`
	USBStorageDisabled   bool `yaml:"usb_storage_disabled"`
	IsAirGapped          bool `yaml:"is_air_gapped"`
	SeparateTmp          bool `yaml:"separate_tmp"`
	SeparateVar          bool `yaml:"separate_var"`
	SeparateVarLog       bool `yaml:"separate_var_log"`
	SeparateVarLogAudit  bool `yaml:"separate_var_log_audit"`
	SeparateVarTmp       bool `yaml:"separate_var_tmp"`
	SeparateHome         bool `yaml:"separate_home"`
}

type CheckContentRef struct {
	Href string `json:"href"`
	Name string `json:"name"`
}

type Checklist struct {
	Title       string      `json:"title"`
	ID          string      `json:"id"`
	CKLBVersion string      `json:"cklb_version"`
	Active      bool        `json:"active"`
	Mode        int         `json:"mode"`
	HasPath     bool        `json:"has_path"`
	TargetData  *TargetData `json:"target_data"`
	STIGs       []STIG      `json:"stigs"`
}

type GroupTreeEntry struct {
	ID          string `json:"id"`
	Title       string `json:"title"`
	Description string `json:"description"`
}

type IncompatibleResultSetsError struct {
	BaseOnly []string
	NewOnly  []string
	Metadata []string
}

type Override struct {
	Status         string `yaml:"status"`
	FindingDetails string `yaml:"finding_details"`
	Comments       string `yaml:"comments,omitempty"`
}

type PlatformConfig struct {
	AuthProvider       string `yaml:"auth_provider"`
	AuthProxy          string `yaml:"auth_proxy"`
	ServiceMesh        string `yaml:"service_mesh"`
	TLSProvider        string `yaml:"tls_provider"`
	ContainerRuntime   string `yaml:"container_runtime"`
	ContainerUser      string `yaml:"container_user"`
	BaseImage          string `yaml:"base_image"`
	NetworkPolicies    bool   `yaml:"network_policies"`
	CICD_SAST          string `yaml:"cicd_sast"`
	CICD_SecretsScan   string `yaml:"cicd_secrets_scan"`
	CICD_Signing       string `yaml:"cicd_signing"`
	DependencyMonitor  string `yaml:"dependency_monitoring"`
	SCM                string `yaml:"scm"`
	DefectTracking     string `yaml:"defect_tracking"`
	CentralizedLogging bool   `yaml:"centralized_logging"`
	ResourceLimits     string `yaml:"resource_limits"`

	OSName                 string `yaml:"os_name"`
	OSVersion              string `yaml:"os_version"`
	HostRole               string `yaml:"host_role"`
	InstallationType       string `yaml:"installation_type"`
	Virtualization         string `yaml:"virtualization"`
	NetworkEnvironment     string `yaml:"network_environment"`
	ManagementPlane        string `yaml:"management_plane"`
	Authentication         string `yaml:"authentication"`
	PrivilegedAccess       string `yaml:"privileged_access"`
	SELinuxMode            string `yaml:"selinux_mode"`
	FIPSMode               bool   `yaml:"fips_mode"`
	AuditService           string `yaml:"audit_service"`
	JournaldEnabled        bool   `yaml:"journald_enabled"`
	RNGDEnabled            bool   `yaml:"rngd_enabled"`
	TimeSync               string `yaml:"time_sync"`
	Firewall               string `yaml:"firewall"`
	PackageSource          string `yaml:"package_source"`
	FileIntegrity          string `yaml:"file_integrity"`
	AntivirusOrEDR         string `yaml:"antivirus_or_edr"`
	SSHAccess              string `yaml:"ssh_access"`
	BootloaderProtected    bool   `yaml:"bootloader_protected"`
	CryptoPolicy           string `yaml:"crypto_policy"`
	DiskEncryption         string `yaml:"disk_encryption"`
	MountStrategy          string `yaml:"mount_strategy"`
	TmpMountOptions        string `yaml:"tmp_mount_options"`
	VarTmpMountOptions     string `yaml:"var_tmp_mount_options"`
	AuditLogMountOptions   string `yaml:"audit_log_mount_options"`
	LocalAccountPolicy     string `yaml:"local_account_policy"`
	KubernetesDistribution string `yaml:"kubernetes_distribution"`
	UpdateModel            string `yaml:"update_model"`
}

type Profile struct {
	Kind     string          `yaml:"kind"`
	Metadata ProfileMetadata `yaml:"metadata"`
	STIGs    []STIGProfile   `yaml:"stigs"`

	AppName      string              `yaml:"-"`
	FQDN         string              `yaml:"-"`
	Description  string              `yaml:"-"`
	Chars        Characteristics     `yaml:"-"`
	Platform     PlatformConfig      `yaml:"-"`
	Overrides    map[string]Override `yaml:"-"`
	SelectedSTIG *STIGProfile        `yaml:"-"`
	// contains filtered or unexported fields
}

type ProfileMetadata struct {
	Name        string `yaml:"name"`
	FQDN        string `yaml:"fqdn"`
	Description string `yaml:"description"`
	Version     string `yaml:"version"`
}

type ResultChange struct {
	Identity       string
	BaseStatus     ResultStatus
	NewStatus      ResultStatus
	Classification ChangeClassification
}

type ResultStatus string

type Rule struct {
	GroupIDSrc        string           `json:"group_id_src"`
	GroupTree         []GroupTreeEntry `json:"group_tree"`
	GroupID           string           `json:"group_id"`
	Severity          string           `json:"severity"`
	GroupTitle        string           `json:"group_title"`
	RuleIDSrc         string           `json:"rule_id_src"`
	RuleID            string           `json:"rule_id"`
	RuleVersion       string           `json:"rule_version"`
	RuleTitle         string           `json:"rule_title"`
	FixText           string           `json:"fix_text"`
	Weight            string           `json:"weight"`
	CheckContent      string           `json:"check_content"`
	CheckContentRef   *CheckContentRef `json:"check_content_ref"`
	Classification    string           `json:"classification"`
	Discussion        string           `json:"discussion"`
	FalsePositives    string           `json:"false_positives"`
	FalseNegatives    string           `json:"false_negatives"`
	Documentable      string           `json:"documentable"`
	SecurityOverride  string           `json:"security_override_guidance"`
	PotentialImpacts  string           `json:"potential_impacts"`
	ThirdPartyTools   string           `json:"third_party_tools"`
	IAControls        string           `json:"ia_controls"`
	Responsibility    string           `json:"responsibility"`
	Mitigations       string           `json:"mitigations"`
	MitigationControl string           `json:"mitigation_control"`
	LegacyIDs         []string         `json:"legacy_ids"`
	CCIs              []string         `json:"ccis"`
	ReferenceID       *string          `json:"reference_identifier"`
	UUID              string           `json:"uuid"`
	SIGUUID           string           `json:"stig_uuid"`
	Status            string           `json:"status"`
	Overrides         map[string]any   `json:"overrides"`
	Comments          string           `json:"comments"`
	FindingDetails    string           `json:"finding_details"`
}

type STIG struct {
	Revision            string  `json:"-"`
	STIGName            string  `json:"stig_name"`
	DisplayName         string  `json:"display_name"`
	STIGID              string  `json:"stig_id"`
	ReleaseInfo         string  `json:"release_info"`
	UUID                string  `json:"uuid"`
	ReferenceIdentifier *string `json:"reference_identifier"`
	Size                int     `json:"size"`
	Rules               []Rule  `json:"rules"`
}

type STIGDefinition struct {
	ID             string
	ChecklistSlug  string
	TargetRole     string
	TechnologyArea string
	STIGName       string
	DisplayName    string
	STIGID         string
	ZipURL         string
	XCCDFName      string
}

type STIGProfile struct {
	ID              string              `yaml:"id"`
	Description     string              `yaml:"description"`
	Characteristics Characteristics     `yaml:"characteristics"`
	Platform        PlatformConfig      `yaml:"platform"`
	Overrides       map[string]Override `yaml:"overrides,omitempty"`
}

type ScanEvidence struct {
	// contains filtered or unexported fields
}

type TargetData struct {
	TargetType     string `json:"target_type"`
	HostName       string `json:"host_name"`
	IPAddress      string `json:"ip_address"`
	MACAddress     string `json:"mac_address"`
	FQDN           string `json:"fqdn"`
	Comments       string `json:"comments"`
	Role           string `json:"role"`
	IsWebDatabase  bool   `json:"is_web_database"`
	TechnologyArea string `json:"technology_area"`
	WebDBSite      string `json:"web_db_site"`
	WebDBInstance  string `json:"web_db_instance"`
}

type XCCDFComparison struct {
	Base             *XCCDFResultSet
	New              *XCCDFResultSet
	Changes          []ResultChange
	UnchangedCount   int
	RegressionCount  int
	ImprovementCount int
	ReclassifyCount  int
}

type XCCDFResultSet struct {
	SourcePath       string
	BenchmarkID      string
	BenchmarkVersion string
	TestResultID     string
	ProfileID        string
	StartTime        string
	EndTime          string
	Targets          []string
	RuleResults      map[string]XCCDFRuleResult
}

type XCCDFRuleResult struct {
	Identity string
	RuleID   string
	Status   ResultStatus
}