documentation_complete: true

title: 'Install sequoia-sq Package'

description: |-
    {{{ describe_package_install(package="sequoia-sq") }}}

rationale: |-
    The <tt>sequoia-sq</tt> package provides the <tt>sq</tt> command-line tool,
    which is used for OpenPGP operations including verification of GPG signatures.
    This tool is required for cryptographic verification of software packages and
    GPG keys using modern OpenPGP implementations.

severity: low

identifiers:
    cce@rhel10: CCE-86458-7
    cce@sle16: CCE-96148-2

references:
    hipaa: 164.308(a)(1)(ii)(D),164.312(b),164.312(c)(1),164.312(c)(2),164.312(e)(2)(i)
    ospp: FPT_TUD_EXT.1,FPT_TUD_EXT.2
    srg: SRG-OS-000366-GPOS-00153

ocil_clause: 'the package is not installed'

ocil: '{{{ ocil_package(package="sequoia-sq") }}}'

template:
    name: package_installed
    vars:
        pkgname: sequoia-sq
