Why not publish STIG Benchmark InSpec Profiles quarterly?

[salderma]

Hi all,

Just discovered this tool. However, it does not seem to run well at all for me, I'm not sure if the documentation lacking or I'm hitting bugs. I'm running Ubuntu 20.04, have pulled various versions of the docker image and have attempted to work with the npm version. Neither have produced a successful inspec profile output for a RHEL8 benchmark.

But in my mind, if these inspec profiles are just text, the benchmarks are just text, and MITRE has this software deployed in a functioning manor, why not also generate and publish the InSpec profiles for the most/all OS Benchmarks as part of this project or a companion project?

P.S. It looks like a large number of benchmarks have been included in the repository for the purposes of CI testing, why not keep those benchmarks updated and publish the generated InSpec profiles?