Tool for visualization of SCAP rule evaluation results


Keywords
arf, graph, hacktoberfest, openscap, oval, oval-reports, scap, security, security-tools, visualization, xcddf, xml
License
Apache-2.0
Install
pip install oval-graph==1.3.3

Documentation

oval-graph

Scrutinizer Code Quality Code Coverage Build Status Code Intelligence Status Total alerts Language grade: Python Language grade: JavaScript

Understanding result in the blink of an eye

This tool generates an OVAL result in the form of a tree graph from an ARF xml report from an OpenSCAP scan.

Installation

Learn how to install tool in the Guide.

Example usage

More usage examples are in user Guide

This commands consumes the rule name or regular expression of rule name and the ARF file, which is one of possible standardized format for results of SCAP-compliant scanners. You can read about generating ARF report files using OpenSCAP in the OpenSCAP User Manual. Or you can use test arf files from repository /tests/test_data.

arf-to-graph scan-data/ssg-fedora-ds-arf.xml xccdf_org.ssgproject.content_rule_audit_rules_unsuccessful_file_modification_creat

This command generates a graph and saves file named graph-of-<rule_id>-<date>.html (The date the graph was created.) in the working directory. Then, it opens the generated file in your web browser. Default web browser is Firefox. If Firefox is not installed, the default web browser in OS is used.

demo-screenshot

Execute the test suite

Learn how to execute the test suite in the Guide.