RFC: update to use the 4.x/5.x data features about vulcan HOT 6 CLOSED

I actually want a couple things out of that PR for both Heimdall and Heimdall-Lite and Vulcan and the _tools.

( please create an issues on each project for this - and create a PR or PRs to cover the 6 elements )

• That we update the parsing to allow for either a tag fix and check or a desc, fix and check.
• That we allow for allow for three new types: desc, justification, caveat, discussion
  a. That caveat and or justification are appended to the 'Finding Details'
  b. We actually search for /*caveat*/ and /*justification*/ - such that myorg-/_caveat is discovered.
  b. that discussion or /*discussion*/ be appended to the bottom of the general description - such that vulnerability_discussion would be discovered.
• That we support both text based impacts and numeric based impacts
  a. that our default is the text based impact
  b. that we 'display' the text based impact but put the numeric in if it was used high (0.7)
• That we update inspec_tools and heimdall_tools to use the new sub-sections and text based impacts
• That CAT I / CAT II / CAT III be replaced by High / Medium / Low
• That our tools do not create code that uses " where ' are the correct style

from vulcan.

Is there an InSpec profile created somewhere that already uses all these elements that I can use for reference to make sure the output generated by Vulcan looks correct?

from vulcan.

from vulcan.

Stale issue message

from vulcan.

I think this is more applicable for inspec_tools

from vulcan.

from vulcan.