A command line tool to validate SCAP content.
SCAPVal is a Java Command Line Application that provides information about whether SCAP content conforms to conventions and recommendations outlined in NIST Special Publication 800-126 Rev.3, The Technical Specification for the Security Content Automation Protocol (SCAP). With support for SCAP 1.1, 1.2, and 1.3
This repository contains the Security Content Automation Protocol Validator (SCAPVal) tool along with several required Java modules.
- create-file-list-mojo - A maven plugin required to build and run SCAPVal.
- scap-schematron-rules - Includes schematron rules required to validate with SCAPVal.
- scapval - The Java command line tool to validate SCAP content.
Requires Java Runtime Environment (JRE) 11 or higher.
If the JAVA_HOME variable is set, the JRE which is at that location will be used. Otherwise the JRE available on the path is used.
SCAPVal utilizes Apache Maven. Once 'mvn' is available, from the root directory of the project, run:
mvn clean install package
This will build scapval and once complete will be ready for use in /scapval/target
Please send tool defects reports, enhancement requests, and any other related comments by email to [email protected].