Skip to content

Improve CI sync-cac-oscal when rule/var description/options change - #13865

Merged
marcusburghardt merged 1 commit into
ComplianceAsCode:masterfrom
huiwangredhat:CI_compare_rule_var_updates
Sep 10, 2025
Merged

Improve CI sync-cac-oscal when rule/var description/options change#13865
marcusburghardt merged 1 commit into
ComplianceAsCode:masterfrom
huiwangredhat:CI_compare_rule_var_updates

Conversation

@huiwangredhat

@huiwangredhat huiwangredhat commented Sep 5, 2025

Copy link
Copy Markdown
Contributor

Description:

The CI sync-cac-oscal will be triggered when it detects any updates to controls/profiles/rule/var.
Actually, for the rule and var files, only the rule.description, var.description, and var.options could impact the component-definition. This PR aims to compare the value of rule/var description/options, then do the sync.

Review Hints:

  • How to test the script:
    Var.options was updated in PR:13820
  • python utils/compare_rule_var.py --owner ComplianceAsCode --repo content 13820 linux_os/guide/services/ntp/var_multiple_time_pools.var options
    No updates of rule.description in PR:13150
  • python utils/compare_rule_var.py --owner ComplianceAsCode --repo content 13150 applications/openshift/logging/audit_log_forwarding_uses_tls/rule.yml description

@huiwangredhat
huiwangredhat force-pushed the CI_compare_rule_var_updates branch from fb2d761 to 61c5744 Compare September 5, 2025 08:00
@huiwangredhat

Copy link
Copy Markdown
Contributor Author

@marcusburghardt @Mab879 Would you like to review this PR? Thank you. Have a good weekend:)

@marcusburghardt marcusburghardt added this to the 0.1.79 milestone Sep 5, 2025
@Mab879 Mab879 self-assigned this Sep 5, 2025
@huiwangredhat
huiwangredhat force-pushed the CI_compare_rule_var_updates branch from 61c5744 to 472766d Compare September 8, 2025 07:50

@marcusburghardt marcusburghardt left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @huiwangredhat , I have comments on some small details.

Comment thread .github/workflows/sync-cac-oscal.yml Outdated
Comment thread utils/compare_rule_var.py Outdated
Comment thread utils/compare_rule_var.py Outdated
Comment thread utils/compare_rule_var.py Outdated
@huiwangredhat
huiwangredhat force-pushed the CI_compare_rule_var_updates branch 3 times, most recently from a80f8cc to db34ea0 Compare September 10, 2025 01:51
Comment thread utils/compare_rule_var.py Outdated
Signed-off-by: Sophia Wang <huiwang@redhat.com>
@huiwangredhat
huiwangredhat force-pushed the CI_compare_rule_var_updates branch from db34ea0 to de37e86 Compare September 10, 2025 08:53

@marcusburghardt marcusburghardt left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@marcusburghardt marcusburghardt self-assigned this Sep 10, 2025
@marcusburghardt
marcusburghardt merged commit a820c3b into ComplianceAsCode:master Sep 10, 2025
131 of 132 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants