Add Script to Import DISA STIG to Policy Specific Content

[Mab879]

Description:

This PR adds a script that takes the SRG Requirement, Fix text, check text, and Vulnerability discussion from the DISA STIG XML files and imports them to the Policy Specific Content (PSC) files.

Rationale:

Help prep for the next STIG.

Review Hints:

$ ./utils/import_disa_stig.py --product rhel9 --control stig_rhel9 shared/references/disa-stig-rhel9-v1r2-xccdf-manual.xml

Observe that under the rules used by the STIG the PSC content is updated.

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment

Oracle Linux 8 Environment

[github-actions]

🤖 A k8s content image for this PR is available at:
ghcr.io/complianceascode/k8scontent:11611

Click here to see how to deploy it

If you alread have Compliance Operator deployed:
utils/build_ds_container.py -i ghcr.io/complianceascode/k8scontent:11611

Otherwise deploy the content and operator together by checking out ComplianceAsCode/compliance-operator and:
CONTENT_IMAGE=ghcr.io/complianceascode/k8scontent:11611 make deploy-local

[jan-cerny]

/packit build

[jan-cerny]

I suggest splitting the main function to multiple smaller functions to improve code complexity.

[Mab879]

I have cleaned up the main method a bit, but moving the code the edits the file results in very ugly method signatures.

[codeclimate]

Code Climate has analyzed commit f50aaa1 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 33.3% (50% is the threshold).

This pull request will bring the total coverage in the repository to 58.3% (0.1% change).

View more on Code Climate.

[Mab879]

/packit retest-failed

[jan-cerny]

/packit retest-failed

[jan-cerny]

I have executed the script and it updated the policy specific content as expected.