security-hardening

Clap3 deprecated YAML support, so we need to rewrite command-line parsing to use the new APIs.

Extend macro function that creates OCIL entries for package removed rules to support both package removed/installed rules using an extra parameter to define the behavior of the ocil_clause (the ocil clause "package is installed" for removed package rules and "package is not installed" for installed package rules)

https://github.com/ComplianceAsCode/content/blob/fe68fcd788b85eed7559e6174d71a67

https://github.com/0xmachos/mOSL is a good replacement until this is updated.

Basically, we should remove all settings that are no longer relevant, and add ones that are newly added.

Hi,
It seems like there is an error in the reporting of invalid configuration.

Using this configuration file:

# This
# is
# a
# comment
sp.does_not_exist.enable();

I get:

PHP message: PHP Fatal error:  [snuffleupagus][config] Invalid configuration file in Unknown on line 0

I'm using the latest version of master, with php7.3-fpm.
I can do a PR for this, but I

A nice feature of http.Mux is that it can be used as a handler, so users can set up separate parts of an application on separate muxes that share a common configuration (e.g. a set of interceptors) and then install them on the root mux.

This is currently not possible with GSW, and we should seriously consider doing it.