Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release/v0.9.6 #1657

Merged
merged 319 commits into from
Jul 15, 2021
Merged

Release/v0.9.6 #1657

merged 319 commits into from
Jul 15, 2021

Conversation

davidpofo
Copy link
Contributor

GovReady-Q Release Notes

v0.9.6 (July 15, 2021)

UI changes

  • Display legacy control implementation statements within system's statements.
  • Added compare components button to compare one component's statements to other selected components.
  • Added a Select/Deselect button for component comparison choice.
  • Add accordion to assessment page to provide information on getting data from Wazuh.
  • Add form to Assessments page to collect Wazuh information.

Bug fixes

  • Set component library detail page Systems tab to not be inactive and thus remove the content from the System tab showing up on the Control Implementation Statements tab.

Developer changes

  • Add custom Django command to batch import legacy control implementation statements from legacy SSPs Excel spreadsheet exports. Currently supports CSAM.
  • Added missing unit test for portfolio project endpoint.
  • Add sec_srvc.SecurityService class to represent a security service from which data could be collected.

Data changes

  • Set all StatementTypeEnum.<LABEL>.value to StatementTypeEnum.<LABEL>.name in order for relevant label/term to show up in Django database admin interface.
  • Create baselines for CMMC catalog.
  • Fisma impact level is now represented as Security Sensitivity level following OSCAL's schema.

davidpofo and others added 30 commits April 22, 2021 16:15
Add clear links for forgot password, change password
Smoothly attach assessment reports to systems via the API
…start

Immediately assign change project perms to user starting project
Support displaying controls from multiple catalogs in an SSPs document
* wip

* Local development rework based on deployments repo

* adding +x

* added action for running and some clean up and docs

* Added docker engine check

* added another message at end

* more faq

* changelog

* added selenium & chrome support

* document quick fix

* regression

* readme change

* added var

* Update dev_env/run.py

Co-authored-by: davidpofo <dampofo@umd.edu>

* space

Co-authored-by: davidpofo <dampofo@umd.edu>
Retrieve component control statement much faster by getting
just related catalog_control_as_dict for statement. Also
add statement property to get control title. Display control title
on component control pages.
Fixed a bug where ssh files weren't brought over on restart
…#1570)

* Faster retrieval of component cntl smts, show cntl titles

Retrieve component control statement much faster by getting
just related catalog_control_as_dict for statement. Also
add statement property to get control title. Display control title
on component control pages.

* Update element_detail_tabs.html

system_tags aren't used anywhere

Co-authored-by: Greg Elin <greg.elin@govready.com>
Co-authored-by: davidpofo <dampofo@umd.edu>
Update stub_app for input, components
enums need to match case of value. adding smt id to logs
Display control catalog guidance text in `details` tag
next to component control implementation statements.

Also clean up some html on component detail pages, move
some styles to main `govready-q.css` file.
and left align text; widen from 9 to 10 columns main content.
…ovready-q into ge/action-btn-text-left-align
davidpofo and others added 25 commits July 2, 2021 11:50
Co-authored-by: Greg Elin <Greg Elin>
New govready_users parameter in local/environment.json
to create sample users on install.
* Add Wazuh info via end-user form

* Create SecurityService class to represent Security Service

Create `sec_srvc.SecurityService` class to represent a security service
from which data could be collected.

Add form to Assessments page to collect info from Wazuh SecurityService.

* Fix sec_srvc.py

* Abstracted and made a few improvements

* Fix uuid error

* Fix testing for fields

Co-authored-by: Greg Elin <greg.elin@govready.com>
Co-authored-by: Alexander Ward <alexander.ward1@gmail.com>
* Improve CMMC links, add OSCAL methods for link content

Improve CMMC catalog links to link to NIST 800-53 in GovReady.

Add methods to OSCAL catalog, get control_part, guidance links

Add get_control_part_by_name, get_control_guidance_links,
get_guidance_related_links_by_value_in_href, and
get_guidance_related_links_text_by_value_in_href to make getting
link content easier.

* Display related controls as links in control guidance

* Properly assign CMMC baselines

* Remove debugging print statements

* Fix typo

* Properly use StatementTypeEnum when saving smts

Co-authored-by: Greg Elin <greg.elin@govready.com>
Co-authored-by: Greg Elin <Greg Elin>
* Add Wazuh info via end-user form

* Create SecurityService class to represent Security Service

Create `sec_srvc.SecurityService` class to represent a security service
from which data could be collected.

Add form to Assessments page to collect info from Wazuh SecurityService.

* Fix sec_srvc.py

* Abstracted and made a few improvements

* Fix uuid error

* Fix testing for fields

* Fix assessment summary link to wazuh

Co-authored-by: Greg Elin <greg.elin@govready.com>
Co-authored-by: Alexander Ward <alexander.ward1@gmail.com>
* adding drag and fill for component import

* client-side filetype checking

* client-side file size checking 5MB max. missing div.

* missing listed catalog for CMMC. Delete extra migration. adjust test for drag-n-fill. import_project_submit for import project view/test

* json_content not id_file

* spelling

* del

* hot fix for external catalogs
…e to remove controls from another catalog when resetting baselines. (#1655)

Co-authored-by: Greg Elin <greg.elin@govready.com>
Co-authored-by: Greg Elin <greg.elin@govready.com>
Readded AppInput
Allow more Git URL styles in Add app source
Copy link
Contributor

@peterkaminski peterkaminski left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

Copy link
Contributor

@gregelin gregelin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good

@gregelin gregelin merged commit f85b457 into main Jul 15, 2021
@davidpofo davidpofo deleted the release/v0.9.6 branch July 15, 2021 20:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants