mixed oscap version support
tests
- NONE https://code-ib-mario.staging.dso.mil/dsop/google/distroless/java-11/-/pipelines/51477
- RHEL/MULTIARCH https://code-ib-mario.staging.dso.mil/dsop/ironbank-pipelines/pipeline-runner/-/pipelines/51474
- DEB https://code-ib-mario.staging.dso.mil/dsop/opensource/debian/debian12.x/debian-12-slim/-/pipelines/51486
- SUSE https://code-ib-mario.staging.dso.mil/dsop/suse/bci/bci-base/-/pipelines/51478
- UBUNTU https://code-ib-mario.staging.dso.mil/dsop/canonical/ubuntu/pro-cis-stig-22.04/ubuntu-pro-cis-stig-22.04/-/pipelines/51469
mixed versions of ComplianceAsCode for various reasons:
- items stuck on 0.1.72:
- debian(s) because tests are broken in 0.1.73 (fatal error)
- rhel(s) because the 0.1.73 datastream dropped the CVE OVAL feed and modules needs devtime to support that
- items bumped to 0.1.73:
- ubuntu 20.04 because it works fine
- ubuntu 22.04 because the stig profile has been introduced
- suse because it works fine (though the OVAL path changed)
- sidequest - use anchorectl's version to determine anchore version
Edited by Chad Geary