{
  "note": "The curated OSCAL examples committed in this repository, indexed by tools/copy_examples.py with the path, byte count and SHA-256 of each. Every build re-verifies the files against this index, so an edit is only accepted through an explicit --rebaseline run recorded in BUILD-LOG.md. Catalog-first is not here: it is published in a public repository and linked at the locked revision instead.",
  "link_only": {
    "catalog-first": "https://github.com/awslabs/oscal-content-for-aws-services/blob/4a1779ffb556c4ab8fb3dad94a19d4d198116803/"
  },
  "cis_derived": [
    "assessment-first/Center for Internet Security/CIS_Ubuntu_Linux_24.04_LTS_Benchmark_v1.0.0.json",
    "assessment-first/Center for Internet Security/CIS_Ubuntu_Linux_24_04_LTS_Benchmark_v2_OSCAL_AP.json"
  ],
  "shared": [
    {
      "path": "NIST_SP-800-53_rev5_catalog.json",
      "bytes": 10442037,
      "sha256": "01f37cf90ea99d92242c936cbfbdebcc338eef1f71454e2acac36cc56e9bc062"
    }
  ],
  "files": [
    {
      "approach": "assessment-first",
      "path": "assessment-first/CISA BOD 25-01/ap-cisa-scuba-agnostic.json",
      "bytes": 308830,
      "sha256": "521acdef03590676c0a041bf920e36a7575c63683f04e787909d3c4dcc10ea66"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/CISA BOD 25-01/ap-cisa-scuba-maester.json",
      "bytes": 325728,
      "sha256": "0dac47d1c7ba18908c0bd48a8c4676e3c862a8b99dcbb14dc5eb73123b753653"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/CISA BOD 25-01/ap-cisa-scuba-scubagear.json",
      "bytes": 293862,
      "sha256": "f6e67d58433922c3e6eef8253904ae7b127964f6919d8d74fa38d613947e971e"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/CISA BOD 25-01/ar-cisa-scuba-scubagear.json",
      "bytes": 298328,
      "sha256": "2e13fc65380024e6da79f539fec07f906659c100ae0cec555ed0541d5fce973d"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/CISA BOD 25-01/assessment-plan.json",
      "bytes": 19829,
      "sha256": "97dad5eeba5efdb6b45ce22b92b9316df1479808bca698235c7dfc2d00ed37ee"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/CISA BOD 25-01/sample-ssp.json",
      "bytes": 39652,
      "sha256": "2309e2f7ad9e8a468ac38fa7584094cab3e1bc20fc1d8ae108836f4e65ecf66d"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/Center for Internet Security/CIS_PostgreSQL_18_Benchmark_v1.0.0.json",
      "bytes": 1032133,
      "sha256": "b72eda73c5bef60e2971c93261bc226594cfb8d8aa1be92deb6b2e121bf05379"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/Center for Internet Security/CIS_PostgreSQL_18_Benchmark_v1_0_0_OSCAL_AP.json",
      "bytes": 423087,
      "sha256": "96220c0786192c3892ada09458a78bebb4d3f3bd20ed8f2cf8f9d776b8cd8fa8"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/Center for Internet Security/CIS_Ubuntu_Linux_24.04_LTS_Benchmark_v1.0.0.json",
      "bytes": 6823924,
      "sha256": "1a90fccb4442decd119382233ff8986caaaeede83dcf3c5ab22a87c747ab0c81"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/Center for Internet Security/CIS_Ubuntu_Linux_24_04_LTS_Benchmark_v2_OSCAL_AP.json",
      "bytes": 1768114,
      "sha256": "741bbe5e1b651aa74a0298942a91170df9348e8124746c0a16a0ccca911c803c"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/DISA/STIG_XCCDF to OSCAL Assessment Plans/epas.json",
      "bytes": 821083,
      "sha256": "997ecb028020fdacee66352651a5992e5a1ec1b964d1b332d6c7a5480b7897b6"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/DISA/STIG_XCCDF to OSCAL Assessment Plans/postgres16.json",
      "bytes": 823183,
      "sha256": "e1eed16a4a0f6d6b6025ce05c16832458bbcd4ba16d597340d0c764333197841"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/DISA/STIG_XCCDF to OSCAL Assessment Plans/rhel8.json",
      "bytes": 2454926,
      "sha256": "54cd0e15efb7c96347cfd16012d6fc81b93861079ce8a2ccf4e61eac57b538f7"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/DISA/STIG_XCCDF to OSCAL Assessment Plans/rhel9.json",
      "bytes": 3051725,
      "sha256": "9fbd810f7c658809a3be29bdb9bc14dfdafabbe289482454208f86b3646c7783"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/DISA/STIG_XCCDF to OSCAL Assessment Plans/ubuntu22.json",
      "bytes": 1310065,
      "sha256": "46738bf619cdfbef00913d761586633bec301e4aae5050a30c823f27509c7e7d"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/DISA/STIG_XCCDF to OSCAL Assessment Plans/ubuntu24.json",
      "bytes": 1341083,
      "sha256": "aebb58537acdacaba6667d6076c2f6147baac9d436641789266cb857c126fd3e"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/DISA/STIG_XCCDF to OSCAL Assessment Plans/win2019.json",
      "bytes": 1940344,
      "sha256": "24dead32391e392f3d25501b0581fef5a719add51667c98920ad01f2d9273207"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/DISA/STIG_XCCDF to OSCAL Assessment Plans/win2022.json",
      "bytes": 1858865,
      "sha256": "bfe441c22311614bc30cd080a57b5242129137912400a73a3e731a9f7a9abd7a"
    },
    {
      "approach": "assessment-first",
      "path": "assessment-first/DISA/STIG_XCCDF to OSCAL Assessment Plans/win2025.json",
      "bytes": 1867817,
      "sha256": "b8e54f5a9f6e554cd58bfe0c6b5be46085af5b760786ff6c933b1be7f8150bf8"
    },
    {
      "approach": "component-first",
      "path": "component-first/ansible-validation-component-definition.json",
      "bytes": 1106,
      "sha256": "f22d30678a24146f1be62758a843ad1f34c34eb6a2c00b1008e84a163c4cadbd"
    },
    {
      "approach": "component-first",
      "path": "component-first/assessment-plan.json",
      "bytes": 5105,
      "sha256": "fd50fa2d32cb8a19d9baab6bc4679d863e0b8bddc7902a01c34b25927f61b7d6"
    },
    {
      "approach": "component-first",
      "path": "component-first/assessment-result.json",
      "bytes": 4275,
      "sha256": "06a6ae6a9756dbf9aed6c5c67822e35a4ca324cb2baae47cfed32003b0c57806"
    },
    {
      "approach": "component-first",
      "path": "component-first/cos-component-definition.json",
      "bytes": 2525,
      "sha256": "4944f506f1f2127950e0fb2cd8e251e66e4ec5a83c5e9126ef147117ad233f4a"
    },
    {
      "approach": "component-first",
      "path": "component-first/idservice-component-definition.json",
      "bytes": 5230,
      "sha256": "36b8140ae1272f5e6fef535409375e3cbbd0f0e8387b378ee7d550a3a1760eaf"
    },
    {
      "approach": "component-first",
      "path": "component-first/oscap-validation-component-definition.json",
      "bytes": 1297,
      "sha256": "9efe6492ede4a21a743db6afe6bf05efda79c206d00dc6ee40e89f16145323f3"
    }
  ]
}