Merge pull request #459 from oracle-devrel/security-oci-security-health-check-update-230922

OCI Security Health Check Update 230922

Author: AlexanderHodicke

security/security-design/oci-security-health-check-standard/README.md

@@ -2,6 +2,8 @@
 
 Owner: Olaf Heimburger
 
+Version: 230922
+
 ## Introduction
 ![Flyer](./files/resources/OCI_Security_Health_Check_Standard.png)
 
@@ -21,24 +23,24 @@ See the *OCI Security Health Check - Standard Edition* in action and watch the [
 
 Before running the *OCI Security Health Check - Standard Edition* you should download and verify it.
 
-  - Download the latest distribution [oci-security-health-check-standard-230630.zip](https://github.com/oracle-devrel/technology-engineering/releases/download/oci-security-health-check-std-230630/oci-security-health-check-standard-230630.zip).
+  - Download the latest distribution [oci-security-health-check-standard-230922.zip](https://github.com/oracle-devrel/technology-engineering/releases/download/oci-security-health-check-std-230922/oci-security-health-check-standard-230922.zip).
   - Download the respective checksum file:
-    - [oci-security-health-check-standard-230630.sha512](https://github.com/oracle-devrel/technology-engineering/releases/download/oci-security-health-check-std-230630/oci-security-health-check-standard-230630.sha512).
-    - [oci-security-health-check-standard-230630.sha512256](https://github.com/oracle-devrel/technology-engineering/releases/download/oci-security-health-check-std-230630/oci-security-health-check-standard-230630.sha512256).
+    - [oci-security-health-check-standard-230922.sha512](https://github.com/oracle-devrel/technology-engineering/releases/download/oci-security-health-check-std-230922/oci-security-health-check-standard-230922.sha512).
+    - [oci-security-health-check-standard-230922.sha512256](https://github.com/oracle-devrel/technology-engineering/releases/download/oci-security-health-check-std-230922/oci-security-health-check-standard-230922.sha512256).
   - Verify the integrity of the distribution. Both files must be in the same directory (for example, in your downloads directory).
 
     On MacOS:
     ```
     $ cd <your_downloads_directory>
-    $ shasum -a 512256 -c oci-security-health-check-standard-230630.sha512256
-    oci-security-health-check-standard-230630.zip: OK
+    $ shasum -a 512256 -c oci-security-health-check-standard-230922.sha512256
+    oci-security-health-check-standard-230922.zip: OK
     ```
 
     On Linux (including Cloud Shell):
     ```
     $ cd <your_downloads_directory>
-    $ sha512sum -c oci-security-health-check-standard-230630.sha512
-    oci-security-health-check-standard-230630.zip: OK
+    $ sha512sum -c oci-security-health-check-standard-230922.sha512
+    oci-security-health-check-standard-230922.zip: OK
     ```
 
 **Reject the downloaded file if the check fails!**

security/security-design/oci-security-health-check-standard/files/oci-security-health-check-standard/README.md

@@ -2,6 +2,8 @@
 
 Owner: Olaf Heimburger
 
+Version: 230922
+
 ## When to use this asset?
 
 The *OCI Security Health Check - Standard Edition* checks an OCI tenancy for CIS OCI Foundation Benchmark compliance.
@@ -12,22 +14,22 @@ The *OCI Security Health Check - Standard Edition* checks an OCI tenancy for CIS
 
 Before running the *OCI Security Health Check - Standard Edition* you should download and verify it.
 
-  - Download the latest distribution [oci-security-health-check-standard-230630.zip](https://github.com/oracle-devrel/technology-engineering/releases/download/oci-security-health-check-std-230630/oci-security-health-check-standard-230630.zip).
-  - Download the respective checksum file [oci-security-health-check-standard-230630.sha512256](https://github.com/oracle-devrel/technology-engineering/releases/download/oci-security-health-check-std-230630/oci-security-health-check-standard-230630.sha512256).
+  - Download the latest distribution [oci-security-health-check-standard-230922.zip](https://github.com/oracle-devrel/technology-engineering/releases/download/oci-security-health-check-std-230922/oci-security-health-check-standard-230922.zip).
+  - Download the respective checksum file [oci-security-health-check-standard-230922.sha512256](https://github.com/oracle-devrel/technology-engineering/releases/download/oci-security-health-check-std-230922/oci-security-health-check-standard-230922.sha512256).
   - Verify the integrity of the distribution. Both files must be in the same directory (for example, in your downloads directory).
 
     On MacOS:
     ```
     $ cd <your_downloads_directory>
-    $ shasum -a 512256 -c oci-security-health-check-standard-230630.sha512256
-    oci-security-health-check-standard-230630.zip: OK
+    $ shasum -a 512256 -c oci-security-health-check-standard-230922.sha512256
+    oci-security-health-check-standard-230922.zip: OK
     ```
 
     On Linux (including Cloud Shell):
     ```
     $ cd <your_downloads_directory>
-    $ sha512sum -c oci-security-health-check-standard-230630.sha512
-    oci-security-health-check-standard-230630.zip: OK
+    $ sha512sum -c oci-security-health-check-standard-230922.sha512
+    oci-security-health-check-standard-230922.zip: OK
     ```
 
 **Reject the downloaded file if the check fails!**
@@ -86,7 +88,7 @@ The recommended way is to run the *OCI Security Health Check - Standard* in the
   - Upload the distribution file.
   - Extract it
     ```
-    $ unzip -q oci-security-health-check-standard-230630.zip
+    $ unzip -q oci-security-health-check-standard-230922.zip
     ```
 
 ### Run the script
@@ -131,6 +133,11 @@ The report results are summarized in two files:
 The *OCI Security Health Check - Standard Edition* streamlines the usage of the bundled [Compliance Checking Script](https://github.com/oracle-quickstart/oci-cis-landingzone-quickstart/blob/main/compliance-script.md) provided by the [CIS OCI Landing Zone Quick Start Template](https://github.com/oracle-quickstart/oci-cis-landingzone-quickstart).
 
 The *OCI Security Health Check - Standard Edition* would not be possible without the great work of the [CIS OCI Landing Zone Quick Start Template Team](https://github.com/oracle-quickstart/oci-cis-landingzone-quickstart/graphs/contributors).
+
+## Certification
+
+The Compliance Checking Script is certified by the [CIS Center of Internet Security for the OCI Oracle Cloud Foundation Benchmark v1.2.O, Level 1 and 2](https://www.cisecurity.org/partner/oracle).
+
 # License
 
 Copyright (c) 2022-2023 Oracle and/or its affiliates.

security/security-design/oci-security-health-check-standard/files/oci-security-health-check-standard/README.txt

@@ -2,6 +2,7 @@
 OCI Security Health Check - Standard Edition
 ============================================
 Owner: Olaf Heimburger
+Version: 230922
 
 When to use this asset?
 
@@ -52,7 +53,7 @@ Usage
   - From the menu select the Cloud Shell item.
   - When running it the first time:
     - Upload the provided ZIP file.
-    - Extract it with unzip -q oci-security-health-check-standard-230630.zip
+    - Extract it with unzip -q oci-security-health-check-standard-230922.zip
   - Change directory into oci-security-health-check-standard
     $ cd oci-security-health-check-standard
     $ screen
@@ -70,3 +71,22 @@ Usage
     holds all the output created by the scripts. This directory will be
     compressed in a single ZIP file and the resulting ZIP file will be moved to
     the home directory of the account running the script.
+
+
+4 Credits
+
+The OCI Security Health Check - Standard Edition streamlines the usage of the bundled Compliance Checking Script (https://github.com/oracle-quickstart/oci-cis-landingzone-quickstart/blob/main/compliance-script.md) provided by the CIS OCI Landing Zone Quick Start Template (https://github.com/oracle-quickstart/oci-cis-landingzone-quickstart).
+
+The OCI Security Health Check - Standard Edition would not be possible without the great work of the CIS OCI Landing Zone Quick Start Template Team (https://github.com/oracle-quickstart/oci-cis-landingzone-quickstart/graphs/contributors).
+
+5 Certification
+
+The Compliance Checking Script is certified by the CIS Center of Internet Security for the OCI Oracle Cloud Foundation Benchmark v1.2.O, Level 1 and 2 (https://www.cisecurity.org/partner/oracle).
+
+6 License
+
+Copyright (c) 2022-2023 Oracle and/or its affiliates.
+
+Licensed under the Universal Permissive License (UPL), Version 1.0.
+
+See the LICENSE file for more details.

security/security-design/oci-security-health-check-standard/files/oci-security-health-check-standard/requirements.txt

@@ -2,4 +2,4 @@ xlsxwriter>=3.0.3
 pandas>=1.5.2
 openpyxl>=3.0.10
 pyyaml>=6.0
-oci>=2.104
+oci>=2.110