MVP v0.7.0

Adds remote scanning of servers that have OpenSCAP installed

• GovReady needs only to be installed on workstation executing commands
• Uses OpenSCAP-ssh feature (only in OpenSCAP version 1.2.3) to scan remote systems using SSH and SCP
• Transfers reports back to local workstation, keeping them off remote servers

Warnings

• Quickie report, govready compare, and govready rule are not yet working in 0.7.0.

MVP v0.6.0

Adds some convenience commands to make switching to a different profile easier.

• Automatically unzip zip files during govready import
• Specify import directory in GovReadyfile
• Add govready status to easily check certain parameters
• Add govready profile <profile> to adjust scan profile

MVP Release

A usable version of GovReady (with rough edges) for developer-friendly scanning and configuring Linux computers to US Government baseline configurations.

Installs and scans 64-bit RHEL 6.4.+, CentOS 6.4+, and Amazon Linux (2014.03 HVM ami-76817c1e)

• Uses NIST SCAP 1.2 certified scanner OpenSCAP and content from Scap-Security-Guide
• All content and code is open source
• Automatically stores scans with time stamps and generates fix files
• Plain language scan summary results on command line
• Compares results from different scans
• Familiar git-like commands and workflow
• Uses a GovReadFile to set configuration and make commands simpler
• Easily test individual control by name
• Import command to add SCAP content files
• Installs Lynx browser for command line reviewing of scan reports
• Written in bash for transparency and POSIX compliance
• Uses semantic versioning as of this release
• Unix man file

Pre-MVP

Introduce git-like workflow.

• Add 'govready init` command to initialize a directory for tracking scans better.
• Add GovReadyfile to hold default parsing CPE and PROFILE key value pairs for govready scan command.
• Add better quick starts to read me
• Shorter install url of io.govready.org/install
• Automatically install dependencies upon initial install