|
212 | 212 | { "type" : "array", |
213 | 213 | "minItems" : 1, |
214 | 214 | "items" : |
215 | | - { "$ref" : "#assembly_oscal-ar_finding" } }, |
| 215 | + { "$ref" : "#assembly_oscal-assessment-common_finding" } }, |
216 | 216 | "remarks" : |
217 | 217 | { "$ref" : "#field_oscal-metadata_remarks" } }, |
218 | 218 | "required" : |
|
222 | 222 | "start", |
223 | 223 | "reviewed-controls" ], |
224 | 224 | "additionalProperties" : false }, |
225 | | - "oscal-ar-oscal-ar:finding" : |
226 | | - { "title" : "Finding", |
227 | | - "description" : "Describes an individual finding.", |
228 | | - "$id" : "#assembly_oscal-ar_finding", |
229 | | - "type" : "object", |
230 | | - "properties" : |
231 | | - { "uuid" : |
232 | | - { "title" : "Finding Universally Unique Identifier", |
233 | | - "description" : "A machine-oriented, globally unique identifier with cross-instance scope that can be used to reference this finding in this or other OSCAL instances. The locally defined UUID of the finding can be used to reference the data item locally or globally (e.g., in an imported OSCAL instance). This UUID should be assigned per-subject, which means it should be consistently used to identify the same subject across revisions of the document.", |
234 | | - "$ref" : "#/definitions/UUIDDatatype" }, |
235 | | - "title" : |
236 | | - { "title" : "Finding Title", |
237 | | - "description" : "The title for this finding.", |
238 | | - "type" : "string" }, |
239 | | - "description" : |
240 | | - { "title" : "Finding Description", |
241 | | - "description" : "A human-readable description of this finding.", |
242 | | - "type" : "string" }, |
243 | | - "props" : |
244 | | - { "type" : "array", |
245 | | - "minItems" : 1, |
246 | | - "items" : |
247 | | - { "$ref" : "#assembly_oscal-metadata_property" } }, |
248 | | - "links" : |
249 | | - { "type" : "array", |
250 | | - "minItems" : 1, |
251 | | - "items" : |
252 | | - { "$ref" : "#assembly_oscal-metadata_link" } }, |
253 | | - "origins" : |
254 | | - { "type" : "array", |
255 | | - "minItems" : 1, |
256 | | - "items" : |
257 | | - { "$ref" : "#assembly_oscal-assessment-common_origin" } }, |
258 | | - "target" : |
259 | | - { "$ref" : "#assembly_oscal-assessment-common_finding-target" }, |
260 | | - "implementation-statement-uuid" : |
261 | | - { "title" : "Implementation Statement UUID", |
262 | | - "description" : "A machine-oriented identifier reference to the implementation statement in the SSP to which this finding is related.", |
263 | | - "$ref" : "#/definitions/UUIDDatatype" }, |
264 | | - "related-observations" : |
265 | | - { "type" : "array", |
266 | | - "minItems" : 1, |
267 | | - "items" : |
268 | | - { "title" : "Related Observation", |
269 | | - "description" : "Relates the finding to a set of referenced observations that were used to determine the finding.", |
270 | | - "type" : "object", |
271 | | - "properties" : |
272 | | - { "observation-uuid" : |
273 | | - { "title" : "Observation Universally Unique Identifier Reference", |
274 | | - "description" : "A machine-oriented identifier reference to an observation defined in the list of observations.", |
275 | | - "$ref" : "#/definitions/UUIDDatatype" } }, |
276 | | - "required" : |
277 | | - [ "observation-uuid" ], |
278 | | - "additionalProperties" : false } }, |
279 | | - "related-risks" : |
280 | | - { "type" : "array", |
281 | | - "minItems" : 1, |
282 | | - "items" : |
283 | | - { "title" : "Associated Risk", |
284 | | - "description" : "Relates the finding to a set of referenced risks that were used to determine the finding.", |
285 | | - "type" : "object", |
286 | | - "properties" : |
287 | | - { "risk-uuid" : |
288 | | - { "title" : "Risk Universally Unique Identifier Reference", |
289 | | - "description" : "A machine-oriented identifier reference to a risk defined in the list of risks.", |
290 | | - "$ref" : "#/definitions/UUIDDatatype" } }, |
291 | | - "required" : |
292 | | - [ "risk-uuid" ], |
293 | | - "additionalProperties" : false } }, |
294 | | - "remarks" : |
295 | | - { "$ref" : "#field_oscal-metadata_remarks" } }, |
296 | | - "required" : |
297 | | - [ "uuid", |
298 | | - "title", |
299 | | - "description", |
300 | | - "target" ], |
301 | | - "additionalProperties" : false }, |
302 | 225 | "oscal-ar-oscal-ar:import-ap" : |
303 | 226 | { "title" : "Import Assessment Plan", |
304 | 227 | "description" : "Used by assessment-results to import information about the original plan for assessing the system.", |
|
1753 | 1676 | "target-id", |
1754 | 1677 | "status" ], |
1755 | 1678 | "additionalProperties" : false }, |
| 1679 | + "oscal-ar-oscal-assessment-common:finding" : |
| 1680 | + { "title" : "Finding", |
| 1681 | + "description" : "Describes an individual finding.", |
| 1682 | + "$id" : "#assembly_oscal-assessment-common_finding", |
| 1683 | + "type" : "object", |
| 1684 | + "properties" : |
| 1685 | + { "uuid" : |
| 1686 | + { "title" : "Finding Universally Unique Identifier", |
| 1687 | + "description" : "A machine-oriented, globally unique identifier with cross-instance scope that can be used to reference this finding in this or other OSCAL instances. The locally defined UUID of the finding can be used to reference the data item locally or globally (e.g., in an imported OSCAL instance). This UUID should be assigned per-subject, which means it should be consistently used to identify the same subject across revisions of the document.", |
| 1688 | + "$ref" : "#/definitions/UUIDDatatype" }, |
| 1689 | + "title" : |
| 1690 | + { "title" : "Finding Title", |
| 1691 | + "description" : "The title for this finding.", |
| 1692 | + "type" : "string" }, |
| 1693 | + "description" : |
| 1694 | + { "title" : "Finding Description", |
| 1695 | + "description" : "A human-readable description of this finding.", |
| 1696 | + "type" : "string" }, |
| 1697 | + "props" : |
| 1698 | + { "type" : "array", |
| 1699 | + "minItems" : 1, |
| 1700 | + "items" : |
| 1701 | + { "$ref" : "#assembly_oscal-metadata_property" } }, |
| 1702 | + "links" : |
| 1703 | + { "type" : "array", |
| 1704 | + "minItems" : 1, |
| 1705 | + "items" : |
| 1706 | + { "$ref" : "#assembly_oscal-metadata_link" } }, |
| 1707 | + "origins" : |
| 1708 | + { "type" : "array", |
| 1709 | + "minItems" : 1, |
| 1710 | + "items" : |
| 1711 | + { "$ref" : "#assembly_oscal-assessment-common_origin" } }, |
| 1712 | + "target" : |
| 1713 | + { "$ref" : "#assembly_oscal-assessment-common_finding-target" }, |
| 1714 | + "implementation-statement-uuid" : |
| 1715 | + { "title" : "Implementation Statement UUID", |
| 1716 | + "description" : "A machine-oriented identifier reference to the implementation statement in the SSP to which this finding is related.", |
| 1717 | + "$ref" : "#/definitions/UUIDDatatype" }, |
| 1718 | + "related-observations" : |
| 1719 | + { "type" : "array", |
| 1720 | + "minItems" : 1, |
| 1721 | + "items" : |
| 1722 | + { "title" : "Related Observation", |
| 1723 | + "description" : "Relates the finding to a set of referenced observations that were used to determine the finding.", |
| 1724 | + "type" : "object", |
| 1725 | + "properties" : |
| 1726 | + { "observation-uuid" : |
| 1727 | + { "title" : "Observation Universally Unique Identifier Reference", |
| 1728 | + "description" : "A machine-oriented identifier reference to an observation defined in the list of observations.", |
| 1729 | + "$ref" : "#/definitions/UUIDDatatype" } }, |
| 1730 | + "required" : |
| 1731 | + [ "observation-uuid" ], |
| 1732 | + "additionalProperties" : false } }, |
| 1733 | + "related-risks" : |
| 1734 | + { "type" : "array", |
| 1735 | + "minItems" : 1, |
| 1736 | + "items" : |
| 1737 | + { "title" : "Associated Risk", |
| 1738 | + "description" : "Relates the finding to a set of referenced risks that were used to determine the finding.", |
| 1739 | + "type" : "object", |
| 1740 | + "properties" : |
| 1741 | + { "risk-uuid" : |
| 1742 | + { "title" : "Risk Universally Unique Identifier Reference", |
| 1743 | + "description" : "A machine-oriented identifier reference to a risk defined in the list of risks.", |
| 1744 | + "$ref" : "#/definitions/UUIDDatatype" } }, |
| 1745 | + "required" : |
| 1746 | + [ "risk-uuid" ], |
| 1747 | + "additionalProperties" : false } }, |
| 1748 | + "remarks" : |
| 1749 | + { "$ref" : "#field_oscal-metadata_remarks" } }, |
| 1750 | + "required" : |
| 1751 | + [ "uuid", |
| 1752 | + "title", |
| 1753 | + "description", |
| 1754 | + "target" ], |
| 1755 | + "additionalProperties" : false }, |
1756 | 1756 | "oscal-ar-oscal-assessment-common:observation" : |
1757 | 1757 | { "title" : "Observation", |
1758 | 1758 | "description" : "Describes an individual observation.", |
|
0 commit comments