Issues

• Add a schema-integrity test: every definition reachable, every reference resolved

  enhancement
  mitre/hdf-libs#556 · Filter by author aaronlippold opened on Nov 12, 2026
  1

  

• Remove the unreferenced target and platform primitives from hdf-schema

  bug
  mitre/hdf-libs#555 · Filter by author aaronlippold opened on Nov 12, 2026
  1

  

• openvex-to-hdf ignores products[].identifiers (Go and TypeScript), contrary to the VEX guide

  mitre/hdf-libs#525 · Filter by author aaronlippold opened on Nov 7, 2026

• amend apply drops justification, cvss and externalReferences when copying an override into results

  mitre/hdf-libs#524 · Filter by author aaronlippold opened on Nov 7, 2026

• fix(validators): enforce unevaluatedProperties in the declared HDF v3 schema dialect

  bug
  mitre/hdf-libs#523 · Filter by author aaronlippold opened on Nov 7, 2026
  

• BUG: hdf fetch aws-config drops all AWS Config Conformance Pack rules, causing conversion to fail entirely

  mitre/hdf-libs#513 · Filter by author bfield308 opened on Nov 2, 2026

• hdf convert emits two components[] entries (one with an empty name) for a single target

  mitre/hdf-libs#500 · Filter by author sys-sat opened on Oct 29, 2026

• XCCDF benchmark converter: capture all benchmark and rule metadata (DISA and CIS), with an XSD-driven completeness test

  mitre/hdf-libs#499 · Filter by author aaronlippold opened on Oct 28, 2026

• hdf generate inspec-profile (XCCDF): check/fix text loses line breaks, NIST tags include 800-53A references, inspec.yml drops the release

  bugenhancement
  mitre/hdf-libs#489 · Filter by author aaronlippold opened on Oct 24, 2026
  1

• Add a nexusiq-to-hdf converter (Sonatype Nexus IQ / Lifecycle)

  mitre/hdf-libs#482 · Filter by author bfield308 opened on Oct 21, 2026
  1

• ci(release): support continuous @next prereleases from main across both npm and the 13 Go submodules

  enhancement
  Chore

  mitre/hdf-libs#479 · Filter by author aaronlippold opened on Oct 19, 2026
  

• Prisma Cloud CSPM has no conversion path — both existing converters target Compute (and is the 'prisma-to-hdf' label misleading?)

  mitre/hdf-libs#324 · Filter by author clem-field opened on Sep 10, 2026
  2

• amend apply silently no-ops on HDF v2 (InSpec exec-json) results — the shape @mitre/saf converters emit

  mitre/hdf-libs#248 · Filter by author clem-field opened on Aug 25, 2026
  2

• Derive NIST 800-53 Rev 5 mappings from check text, with scored 1:n candidates and 3PAO adjudication

  mitre/hdf-libs#239 · Filter by author clem-field opened on Aug 22, 2026
  2

• hdf CLI cannot read or write target/passthrough — attribution requires falling back to saf-cli

  mitre/hdf-libs#235 · Filter by author clem-field opened on Aug 19, 2026
  3

• hdf validate cannot validate HDF v1 (profiles[]) documents that hdf convert detects at 100% confidence

  mitre/hdf-libs#233 · Filter by author clem-field opened on Aug 19, 2026
  1

• Feature: Add Splunk + Tenable.SC API clients alongside existing file-format converters

  enhancement
  mitre/hdf-libs#86 · Filter by author aaronlippold opened on Jun 6, 2026
  1

• Replace fast-xml-parser with txml to resolve CVEs

  mitre/hdf-libs#63 · Filter by author aaronlippold opened on May 12, 2026
  2