Create a simple System Assessment Result web server
generating JSON data object listing assessment summary
results that can be added to a system's assessment.

This provides a synthentic provider of SAR results data from
which we can test the UI for consuming SAR data.

Polish SAR summary page - use details tag, other improvements.
Polish SAR list page - include deployment name.

Wrap SAR test item to start to make more realistic SAR data.

Display assessment name in Assessment model admin list.

Misc improvements to sar generator and middleware.
Include description value for SAR wrapper.

Remove hardcoded values of system id and deployment id
from SAR middleware pipeline.
Pass as many values as possible in SAR wrapper object.
Properly handle UUID to string and back again
Post assessment to system without a deployment ID
Display project id, system id on project pages.

Add `tools/simple_sar_server/wazuh_etl.py` to
support Wazuh SCA results in SAR pipeline.

Display all summary values of a SAR result for
each inventory item using a loop and table.

Update stub_app used by complianca_app command
or generating compliance app to include "input" and "output" section;
and to have folders for templates, utils, and components.

Add in exceprtion for integrity error to eventually support
gracefully handling.

Implement impact level as a statement about a system of type "fisma_impact_level"
with imoact level in body. This continues idea that statements are
factual observations about a system.  Statement must be associated
with system.root_element and be consumed by root_element.

…ress the refresh documents button to see changes. Removing cache removal function.

… no projects for this test.

…catalog retrieval

Enumarate different type of statements

Provide better error reporting on import component schema validation.

Report actual validation error to standout.

…out through environment variables instead of db based setting.

…les-startpack app source multi-catalog.

Rearrange Create | Import | Manage component buttons

This fixes a bug where non-admin users were not assigned permissions
to change a project started by the user until after several project
modification steps were performed. The fix assigns non-admin project
change permissions right after project and system is created and
before further actions are made to project, such as setting baseline controls.

… methods

Set system fisma_impact_level root_element statement as part of
question action to set baseline. Since baselines could have more
names than just "Low", "Moderate", and "High", we only set
fisma_impact_level if baseline is one of those three.
This might need to improve in the future and make setting fisma_impact_level
a separate question action from setting baselines.

Created set/get methods for fisma_impact_level in System model
to make sure only one statement for the system with statement_type of
fisma_impact_level existed.

Also fixed POAM stat counting to only count POAMs associated with
current system. Existing POAM count was not filtering on current system.

…o ge/account-fixes

spelling

Improve reporting of error logging

all caps no brakes

Closes #1547 Display impact level on project page.

Add clear links for forgot password, change password

Smoothly attach assessment reports to systems via the API

…start

Immediately assign change project perms to user starting project

Support displaying controls from multiple catalogs in an SSPs document

* wip

* Local development rework based on deployments repo

* adding +x

* added action for running and some clean up and docs

* Added docker engine check

* added another message at end

* more faq

* changelog

* added selenium & chrome support

* document quick fix

* regression

* readme change

* added var

* Update dev_env/run.py

Co-authored-by: davidpofo <dampofo@umd.edu>

* space

Co-authored-by: davidpofo <dampofo@umd.edu>

Retrieve component control statement much faster by getting
just related catalog_control_as_dict for statement. Also
add statement property to get control title. Display control title
on component control pages.

Fixed a bug where ssh files weren't brought over on restart

…#1570)

* Faster retrieval of component cntl smts, show cntl titles

Retrieve component control statement much faster by getting
just related catalog_control_as_dict for statement. Also
add statement property to get control title. Display control title
on component control pages.

* Update element_detail_tabs.html

system_tags aren't used anywhere

Co-authored-by: Greg Elin <greg.elin@govready.com>
Co-authored-by: davidpofo <dampofo@umd.edu>

put "Manage Import Records" button last

…ent type.

Update stub_app for input, components

enums need to match case of value. adding smt id to logs

…quirements.txt as per PR review.

Display control catalog guidance text in `details` tag
next to component control implementation statements.

Also clean up some html on component detail pages, move
some styles to main `govready-q.css` file.

Better notify users when project implementation statement
differs from certified by displaying notice in third column control detail pages.

Improve language notifying users that project implementation statement
differs from certified. Only difference notice is clickable now.

…-tag

Search component library by tag, make component tags clickable

Display control catalog guidance text in details tag next to component control implementation statements.

Better notifification when project smt differs from certified

Am/feature inactivity timeout