compliance-tool

usage: compliance-tool [-h] {list,scan,remediate} ...

Sub-commands

list

list available components (profiles, rules, controls), will list profiles if component type is not specified

compliance-tool list [-h] [--tailoring SOURCE_FILE]
                     {profiles,controls,rules} ...

Named Arguments

--tailoring: policy customizations (recognized formats: JSON Tailoring)

Sub-commands

profiles

list available profiles

compliance-tool list profiles [-h]

controls

list available controls (requirements) within a given profile

compliance-tool list controls [-h] --profile PROFILE_ID

Named Arguments

--profile: identifier of the profile that should be used for selected operation

rules

list available rules for a given profile

compliance-tool list rules [-h] --profile PROFILE_ID

Named Arguments

--profile: identifier of the profile that should be used for selected operation

scan

perform a compliance scan

compliance-tool scan [-h] [--tailoring SOURCE_FILE] --profile PROFILE_ID
                     [--control CONTROL_ID] [--rule RULE_ID]
                     [--html DESTINATION_FILE] [--json DESTINATION_FILE]

Named Arguments

--tailoring: policy customizations (recognized formats: JSON Tailoring)
--profile: identifier of the profile that should be used for selected operation
--control: use only control(s) (requirement(s)) with given identifier
--rule: use only rule(s) with given identifier
--html: write a human-readable HTML report with the results at the given destination
--json: write a JSON-formatted report with the results at the given destination

remediate

perform a system remediation

compliance-tool remediate [-h] [--tailoring SOURCE_FILE] --profile PROFILE_ID
                          [--control CONTROL_ID] [--rule RULE_ID]

Named Arguments

--tailoring: policy customizations (recognized formats: JSON Tailoring)
--profile: identifier of the profile that should be used for selected operation
--control: control (requirement) identifier
--rule: rule identifier