1 /*
2 * Portions of this software was developed by employees of the National Institute
3 * of Standards and Technology (NIST), an agency of the Federal Government and is
4 * being made available as a public service. Pursuant to title 17 United States
5 * Code Section 105, works of NIST employees are not subject to copyright
6 * protection in the United States. This software may be subject to foreign
7 * copyright. Permission in the United States and in foreign countries, to the
8 * extent that NIST may hold copyright, to use, copy, modify, create derivative
9 * works, and distribute this software and its documentation without fee is hereby
10 * granted on a non-exclusive basis, provided that this notice and disclaimer
11 * of warranty appears in all copies.
12 *
13 * THE SOFTWARE IS PROVIDED 'AS IS' WITHOUT ANY WARRANTY OF ANY KIND, EITHER
14 * EXPRESSED, IMPLIED, OR STATUTORY, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTY
15 * THAT THE SOFTWARE WILL CONFORM TO SPECIFICATIONS, ANY IMPLIED WARRANTIES OF
16 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND FREEDOM FROM
17 * INFRINGEMENT, AND ANY WARRANTY THAT THE DOCUMENTATION WILL CONFORM TO THE
18 * SOFTWARE, OR ANY WARRANTY THAT THE SOFTWARE WILL BE ERROR FREE. IN NO EVENT
19 * SHALL NIST BE LIABLE FOR ANY DAMAGES, INCLUDING, BUT NOT LIMITED TO, DIRECT,
20 * INDIRECT, SPECIAL OR CONSEQUENTIAL DAMAGES, ARISING OUT OF, RESULTING FROM,
21 * OR IN ANY WAY CONNECTED WITH THIS SOFTWARE, WHETHER OR NOT BASED UPON WARRANTY,
22 * CONTRACT, TORT, OR OTHERWISE, WHETHER OR NOT INJURY WAS SUSTAINED BY PERSONS OR
23 * PROPERTY OR OTHERWISE, AND WHETHER OR NOT LOSS WAS SUSTAINED FROM, OR AROSE OUT
24 * OF THE RESULTS OF, OR USE OF, THE SOFTWARE OR SERVICES PROVIDED HEREUNDER.
25 */
26
27 package gov.nist.secauto.oscal.tools.cli.core.commands.assessmentresults;
28
29 import gov.nist.secauto.metaschema.binding.io.xml.XmlUtil;
30 import gov.nist.secauto.metaschema.model.common.util.CollectionUtil;
31 import gov.nist.secauto.metaschema.model.common.util.ObjectUtils;
32 import gov.nist.secauto.metaschema.model.common.validation.JsonSchemaContentValidator;
33 import gov.nist.secauto.oscal.lib.OscalBindingContext;
34 import gov.nist.secauto.oscal.tools.cli.core.commands.oscal.AbstractOscalValidationSubcommand;
35
36 import org.json.JSONObject;
37
38 import java.io.IOException;
39 import java.util.LinkedList;
40 import java.util.List;
41
42 import javax.xml.transform.Source;
43
44 public class ValidateSubcommand
45 extends AbstractOscalValidationSubcommand {
46 @Override
47 public String getDescription() {
48 return "Check that the specified OSCAL instance is well-formed and valid to the System Assessment Results model";
49 }
50
51 @Override
52 protected List<Source> getOscalXmlSchemas() throws IOException {
53 List<Source> retval = new LinkedList<>();
54 retval.add(
55 ObjectUtils.requireNonNull(
56 XmlUtil.getStreamSource(
57 OscalBindingContext.class.getResource("/schema/xml/oscal-ar_schema.xsd"))));
58 return CollectionUtil.unmodifiableList(retval);
59 }
60
61 @Override
62 protected JSONObject getOscalJsonSchema() {
63 return JsonSchemaContentValidator.toJsonObject(
64 ObjectUtils.requireNonNull(
65 OscalBindingContext.class.getResourceAsStream("/schema/json/oscal-ar_schema.json")));
66 }
67 }