updated to SCI v0.3.8 (ossf#345)

Author: eddie-knight

cmd/go.mod

@@ -7,7 +7,7 @@ toolchain go1.24.1
 require (
 	github.com/defenseunicorns/go-oscal v0.6.2
 	github.com/goccy/go-yaml v1.18.0
-	github.com/revanite-io/sci v0.3.7
+	github.com/revanite-io/sci v0.3.8
 	github.com/spf13/cobra v1.9.1
 )
 

cmd/go.sum

@@ -9,8 +9,8 @@ github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
-github.com/revanite-io/sci v0.3.7 h1:U/aZEYqxha0zfl30eD5qo+1Tf3rrdtVdU2H2V8AnOrM=
-github.com/revanite-io/sci v0.3.7/go.mod h1:l28dD4vZ8VXETt2Mizj+9x4+x2iXkVtVjLH39IaYm3g=
+github.com/revanite-io/sci v0.3.8 h1:XbbUmpGgWgf0VZouZhoMH0P/wntbJ98AydBgewk5kCw=
+github.com/revanite-io/sci v0.3.8/go.mod h1:lEK7w8kfwWUXFKYoJYyqzTT74umE4OkOlRYp88uxHhc=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/spf13/cobra v1.9.1 h1:CXSaggrXdbHK9CF+8ywj8Amf7PBRmPCOJugH954Nnlo=
 github.com/spf13/cobra v1.9.1/go.mod h1:nDyEzZ8ogv936Cinf6g1RU9MRY64Ir93oCnqb9wxYW0=

cmd/pkg/baseline/loader.go

@@ -57,7 +57,7 @@ func (l *Loader) Load() (*types.Baseline, error) {
 	b.ControlFamilyIDs = familyIDs
 	b.Catalog = layer2.Catalog{
 		ControlFamilies: controlFamilies,
-		Metadata: &layer2.Metadata{
+		Metadata: layer2.Metadata{
 			MappingReferences: frameworks,
 		},
 	}