From 292afed8087424180bdc2ded4671c80779318c14 Mon Sep 17 00:00:00 2001 From: Gabriel Becker Date: Fri, 14 Aug 2026 14:36:21 +0200 Subject: [PATCH] disa-alignment: Upload ARF results to artifacts as well. In case of test failure. These files can be more easily processed locally by AI for example and can help reviewing more in depth the differences between the two sources of results. --- scanning/disa-alignment/anaconda.py | 5 ++++- scanning/disa-alignment/ansible.py | 5 ++++- scanning/disa-alignment/oscap.py | 5 ++++- 3 files changed, 12 insertions(+), 3 deletions(-) diff --git a/scanning/disa-alignment/anaconda.py b/scanning/disa-alignment/anaconda.py index 07d312c7..0b70137e 100644 --- a/scanning/disa-alignment/anaconda.py +++ b/scanning/disa-alignment/anaconda.py @@ -47,4 +47,7 @@ # Compare ARFs and report results from output shared.compare_arfs('ssg-arf.xml', 'disa-arf.xml') -results.report_and_exit(logs=['ssg-report.html', 'disa-report.html']) +logs = ['ssg-report.html', 'disa-report.html'] +if results.global_counts['fail'] or results.global_counts['error']: + logs += ['ssg-arf.xml', 'disa-arf.xml'] +results.report_and_exit(logs=logs) diff --git a/scanning/disa-alignment/ansible.py b/scanning/disa-alignment/ansible.py index 9da85c8a..4a0f5d5d 100644 --- a/scanning/disa-alignment/ansible.py +++ b/scanning/disa-alignment/ansible.py @@ -61,4 +61,7 @@ # Compare ARFs and report results from output shared.compare_arfs('ssg-arf.xml', 'disa-arf.xml') -results.report_and_exit(logs=['ssg-report.html', 'disa-report.html']) +logs = ['ssg-report.html', 'disa-report.html'] +if results.global_counts['fail'] or results.global_counts['error']: + logs += ['ssg-arf.xml', 'disa-arf.xml'] +results.report_and_exit(logs=logs) diff --git a/scanning/disa-alignment/oscap.py b/scanning/disa-alignment/oscap.py index 42d7e7a9..3e908e57 100644 --- a/scanning/disa-alignment/oscap.py +++ b/scanning/disa-alignment/oscap.py @@ -51,4 +51,7 @@ # Compare ARFs and report results from output shared.compare_arfs('ssg-arf.xml', 'disa-arf.xml') -results.report_and_exit(logs=['ssg-report.html', 'disa-report.html']) +logs = ['ssg-report.html', 'disa-report.html'] +if results.global_counts['fail'] or results.global_counts['error']: + logs += ['ssg-arf.xml', 'disa-arf.xml'] +results.report_and_exit(logs=logs)