secunit-core 0.4.2

Registry, evidence, hashing, and verification primitives for secunit.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://github.com/Battle-Creek-LLC/secunit/schemas/control.schema.json",
  "title": "Control",
  "description": "A discrete recurring obligation derived from a WISP. One YAML file per control under controls/.",
  "type": "object",
  "additionalProperties": false,
  "required": ["id", "title", "policy", "owner", "cadence", "skill"],
  "properties": {
    "id": {
      "type": "string",
      "pattern": "^[a-z0-9]+(-[a-z0-9]+)*$",
      "description": "Stable kebab-case identifier; used as evidence path component."
    },
    "title": { "type": "string", "minLength": 1 },
    "policy": { "type": "string", "minLength": 1 },
    "nist": {
      "type": "array",
      "items": { "type": "string", "pattern": "^[A-Z]{2}-[0-9]+(\\([0-9]+\\))?$" },
      "uniqueItems": true
    },
    "owner": { "type": "string", "minLength": 1 },
    "cadence": {
      "type": "string",
      "enum": ["continuous", "weekly", "monthly", "quarterly", "semi-annual", "annual"]
    },
    "weekday": {
      "type": "string",
      "enum": ["monday", "tuesday", "wednesday", "thursday", "friday", "saturday", "sunday"]
    },
    "due_by": {
      "type": "string",
      "description": "For annual cadence; either an ISO date or a `<month>-<day>` form like `december-31`."
    },
    "skill": { "type": "string", "pattern": "^[a-z0-9]+(-[a-z0-9]+)*$" },
    "skill_args": {
      "type": "object",
      "additionalProperties": true
    },
    "scope": { "$ref": "#/$defs/scope" },
    "evidence_required": {
      "type": "array",
      "items": { "$ref": "#/$defs/evidenceRequirement" }
    },
    "remediation_thresholds": {
      "type": "object",
      "additionalProperties": { "type": "integer", "minimum": 0 }
    },
    "outputs": {
      "type": "object",
      "additionalProperties": true
    },
    "references": {
      "type": "array",
      "items": {
        "type": "object",
        "required": ["title"],
        "properties": {
          "title": { "type": "string" },
          "path": { "type": "string" },
          "url": { "type": "string", "format": "uri" }
        }
      }
    }
  },
  "$defs": {
    "scope": {
      "type": "object",
      "oneOf": [
        {
          "required": ["kind"],
          "properties": {
            "kind": { "type": "string", "minLength": 1 },
            "all": { "type": "boolean" },
            "has_tags": { "type": "array", "items": { "type": "string" } },
            "excludes": { "type": "array", "items": { "type": "string" } }
          },
          "additionalProperties": false
        },
        {
          "required": ["inline"],
          "properties": {
            "inline": {
              "type": "array",
              "minItems": 1,
              "items": {
                "type": "object",
                "required": ["name", "kind"],
                "properties": {
                  "name": { "type": "string" },
                  "kind": { "type": "string" },
                  "tags": { "type": "array", "items": { "type": "string" } }
                },
                "additionalProperties": true
              }
            }
          },
          "additionalProperties": false
        }
      ]
    },
    "evidenceRequirement": {
      "type": "object",
      "required": ["kind"],
      "properties": {
        "kind": { "type": "string", "minLength": 1 },
        "description": { "type": "string" },
        "prompt": { "type": "string" },
        "path": { "type": "string" },
        "cmd": { "type": "string" },
        "per_system": { "type": "boolean" }
      },
      "additionalProperties": false
    }
  }
}