Lint_control_mapping

Field	Value
Type	Skill Resource
Source	~/.copilot/skills/security/scripts/lint_control_mapping.sh
Description	Not specified

Source Content

#!/usr/bin/env bash
# Validate a NIST 800-53 control-mapping Markdown table: every row has a
# control ID + impact-level + evidence column, and no row marked with an
# accepted-state word (Aligned/Met/Satisfied/Implemented/Compliant) has an
# empty or placeholder evidence cell. Pure text/table parsing (python3
# stdlib, no deps) — there is no external CLI for "does this compliance
# table have complete evidence", so this check is 100% custom, honestly
# labeled as such below.
#
# Usage:
#   lint_control_mapping.sh [control-mapping.md]
#
# Example:
#   scripts/lint_control_mapping.sh ./control-mapping.md

set -uo pipefail

DOC="${1:-./control-mapping.md}"

fail=0
warn() { printf '⚠️  %s\n' "$1"; }
error() { printf '❌ %s\n' "$1"; fail=1; }
ok() { printf '✅ %s\n' "$1"; }

if [[ ! -f "$DOC" ]]; then
  echo "Usage: $0 [control-mapping.md]" >&2
  echo "File not found: $DOC" >&2
  exit 2
fi

echo "== control ID + impact-level + evidence columns; evidence required for every accepted-state row (python3 stdlib table parsing — no external CLI exists for this) =="
py_out=$(python3 "$(dirname "$0")/check_control_mapping.py" "$DOC")
py_status=$?

while IFS= read -r line; do
  case "$line" in
    OK::*) ok "${line#OK::}" ;;
    ERROR::*) error "${line#ERROR::}" ;;
    *) [[ -n "$line" ]] && echo "$line" ;;
  esac
done <<< "$py_out"

if [[ "$py_status" -ne 0 ]]; then
  fail=1
fi

echo
if [[ "$fail" -eq 0 ]]; then
  echo "All checks passed."
else
  echo "One or more checks failed — see ❌ lines above."
fi
exit "$fail"