Duplicate ID Violations Between Controls and Groups Causing Validation Failures

[aiden98sherry]

Description

Multiple catalogs in this repository contain duplicate IDs values between control and group elements, violating OSCAL's requirement for unique identifiers across all controls, groups, and parts within a catalog document. This was identified using the metaschema-framework/oscal-cli and the command:

oscal-cli catalog validate /path/to/your-catalog.json

Error Example

[ERROR] [/catalog/group[80]/control[1]] Index 'catalog-groups-controls-parts' has duplicate key for items at paths '/catalog/group[80]' and '/catalog/group[80]/control[1]

Affected catalogs:

• anssi
• ccn_rhel9
• cis_fedora
• cis_ocp
• cis_rhel10
• cis_rhel8
• cis_rhel9
• e8
• ism_o
• stig_rhel8
• stig_rhel9

References:

• Source of the index requirement in the oscal catalog metaschema
• Definition of index constraint in the metaschema docs