-
Notifications
You must be signed in to change notification settings - Fork 749
Description
Description of problem:
In the Lab Exercise 2: Automated Security Scanning Using ComplianceAsCode, when you start a Github Codespaces and select the branch master
and the ComplianceAsCode Workshop 2
for the configuration, it initiates an environment with an Ubuntu 22.04 but with a scanning build for Ubuntu 24.04 leading to "not applicable" results for all the tests
Same type of issue when selecting stable
for the branch, it runs on an Ubuntu 22.04 but build for scanning is done for Ubuntu 20.04
SCAP Security Guide Version:
NA
Operating System Version:
Lab environment with Ubuntu 22.04
/workspaces/content/build (master) $ uname -a
Linux codespaces-3d2704 6.8.0-1030-azure #35~22.04.1-Ubuntu SMP Mon May 26 18:08:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
Steps to Reproduce:
- Create a new Github Codespaces
- Select the branch
master
and theComplianceAsCode Workshop 2
for the configuration - Run the command from documentation:
sudo oscap xccdf eval --profile cis_level1_workstation --results-arf /tmp/arf.xml --report lab2_report.html --oval-results ssg-ubuntu2404-ds.xml
- All tests are "Not applicable"
Actual Results:
The build does not match the linux Ubuntu version run in the environment lab
Expected Results:
The build should match the linux Ubuntu version run in the environment lab
Additional Information/Debugging Steps:
On a side note, this exercise mostly focus on the use of SCAP Workbench which seems deprecated (repo archived, available only until Ubuntu 18.04). Is there an alternative GUI available that should replaced SCAP Workbench ?