Skip to content

v3.7.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Sep 03:15
· 90 commits to main since this release
v3.7.0
This tag was signed with the committer’s verified signature.
wdower
GPG key ID: 6F3430B5C9B852EB
Verified
Learn about vigilant mode.
537505a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changes

537505a Release/v3.7.0 prep (#384)
2ade06b Docs/fixture provenance detail (#372)
3ac5328 chore(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#381)
15e52e6 chore(deps): bump github/codeql-action/upload-sarif (#380)
3e1537b chore(deps): bump the go-dependencies group in /hdf-cli with 2 updates (#379)
5f5d666 chore(deps): bump semgrep in /.github/requirements (#382)
80fd4c6 chore(deps): bump the go-dependencies group (#383)
c236f66 Fix/exporter conformance batch (#377)
5e5aa21 feat(validate): validate HDF v2 (legacy InSpec exec-json) via --schema-ver (#378)
3637333 docs(adr): add ADR-0014 OSCAL extension namespace, prose carriage and identity (#352)
c48630c Fix/grype dirscan downgrade twistlock (#375)
2e2afd1 fix(cli): redirect legacy InSpec exec-json from validate to convert (#373)
7d7fbd8 fix(utilities): neutralize CSV formula triggers hidden behind leading whitespace (#371)
c3b556d Test/fixture audit closeout (#368)
c2d05fe Fix/ac review findings (#367)
df178e2 test(fixtures): require a provenance record in every converter fixture directory (#366)
4111cac fix(cli): make --max-size lift the converter input-size guard (#363)
0b1e4bb Docs/thresholds guide (#361)
5aa588e test(bench): compute heavy-op fixture labels instead of hardcoding them (#365)
04b8e2a Feat/multi scanner merge (#362)
30a4b66 Fix/preserve saf attribution through conversion (#360)
b468e10 Fix/saf supplement input normalization (#354)
32eee32 fix(cli): gate hdf label input at the boundary (results or system) (#351)
67008cc fix(hdfversion): detect v3 from baselines alone — components is optional (#356)
2501c8a fix(diff): bound LevenshteinDistance input length (#357)
5af04a1 fix(cli): unify HDF document detection into a single fingerprinter (#350)
dc5d0cb Fix/oscal 1.2x schema conformance (#353)
81caaa8 Fix/threshold severity roundtrip (#348)
38a9c79 Fix/fixture provenance backfill (#349)
f458bd7 fix(hdf): restore v2⇄v3 conversion fidelity and gate amend-apply input (#347)
23dccd3 Fix/exporter number parity (#345)
3115932 chore(deps): bump github.com/modelcontextprotocol/go-sdk (#346)
caadfb2 Fix/converter input fidelity (#330)
848727b chore(deps): bump the go-dependencies group (#342)
fd23285 chore(deps): bump github.com/aws/aws-sdk-go-v2/service/securityhub (#341)
00cfea2 chore(deps-dev): bump the dev-dependencies group with 5 updates (#340)
d2fcb17 chore(deps): bump github.com/stretchr/testify (#339)
c5f3ddd chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0 (#338)
277b214 Fix/checkov nist mapping and junit warning (#344)
3f7405e ci: run the gates from a pinned release CLI, not a build from main (#343)
916c048 Chore/correct python footprint (#337)
39e8efc Fix/checklist empty requirements (#332)
2a82b8e chore(beads): move to Dolt-native sync, dropping the JSONL export and vendored hooks (#336)
5964eb8 ci(release): publish hdf-fixtures again now that 3.6.0 has shipped (#335)

Installation

# TypeScript/Node.js — install the packages you need
npm install @mitre/hdf-converters@next   # converters + schema + parsers + utilities + mappings
# (bare `latest` on @mitre/hdf-converters belongs to the heimdall2 v2 line — use @next, @rc, or an exact version)
npm install @mitre/hdf-validators    # schema validation
npm install @mitre/hdf-diff          # structural diff engine
npm install @mitre/hdf-engine        # detection, query, compliance rollups
npm install @mitre/hdf-generators    # InSpec profile generation
npm install @mitre/hdf-extension-graph  # profile/baseline extension chains

# Go libraries — hdf-converters pulls in schema, parsers, utilities,
# mappings and validators; the rest are independent modules. hdf-cli is
# deliberately absent despite being tagged: its go.mod carries replace
# directives, so `go install` refuses it outright — it ships as a binary,
# covered below.
go get github.com/mitre/hdf-libs/hdf-converters/v3@v3.7.0
go get github.com/mitre/hdf-libs/hdf-diff/go/v3@v3.7.0
go get github.com/mitre/hdf-libs/hdf-engine/go/v3@v3.7.0
go get github.com/mitre/hdf-libs/hdf-extension-graph/go/v3@v3.7.0
go get github.com/mitre/hdf-libs/hdf-generators/go/v3@v3.7.0

# Go CLI — download a binary for your platform from the assets below, then:
chmod +x hdf && sudo mv hdf /usr/local/bin/

Schema Files

Bundled JSON schemas are attached as release assets and hosted at:
https://mitre.github.io/hdf-libs/schemas/

Assets 22
Loading