I'm try to use Openscap to generate report in Ubuntu 18 headless mode. But the CVE can't be cross referenced with the STIG Viewer. I'm using this manual as the guide: http://static.open-scap.org/openscap-1.2/oscap_user_manual.html I found an example for Redhat 7, but not for Ubuntu 18.
oscap xccdf eval --profile stig-rhel7-disa --stig-viewer results-stig.xml ssg-rhel7-ds.xml
I got error when I tried this command:
oscap xccdf eval --profile stig-ubuntu1804-disa --stig-viewer results-stig.xml /usr/share/xml/scap/ssg/content/ssg-ubuntu1804-ds-1.2.xml
oscap: unrecognized option '--stig-viewer'