Using the Decima Framework

A primary use of the Decima Framework is as an API. To use Decima as an API, the following dependency can be added to your POM to use this library.

<dependency>
  <groupId>gov.nist.secauto.decima</groupId>
  <artifactId>decima-xml-assessment</artifactId>
  <version>0.7.1</version>
</dependency>

This will automatically include the decima-core and decima-xml dependencies.

Decima also provides XML Schema and ISO Schematron testing support. To use these features, he following dependency can be added to your POM.

<dependency>
  <groupId>gov.nist.secauto.decima</groupId>
  <artifactId>decima-xml-testing</artifactId>
  <version>0.7.1</version>
  <scope>test</scope>
</dependency>

This will automatically include the decima-core, decima-xml, decima-xml-assessment, and decima-xml-templating dependencies in the test scope.

For examples of using Decima, checkout the Decima Example module, the Software Identification (SWID) tag validation tool, and the Security Content Automation Protocol (SCAP) content validator.