Add inventory-item-or-component-has-network constraint

[Gabeblis]

Committer Notes

Purpose

This PR aims to add the inventory-item-or-component-has-network constraint which ensures that each inventory item or internal service component is reachable via a network, which requires either an IPv4 address, IPv6 address, fully qualified domain name (FQDN) or uniform resource identifier (URI).

Changes

Added constraint:

• inventory-item-or-component-has-network

Added valid/invalid test content:

• ssp-inventory-item-or-component-has-network-INVALID.xml
• Edited fedramp-ssp-example.oscal.xml to align with constraint

Added yaml files for testing:

• Pass/fail yaml tests added for each of the above constraints.

All Submissions:

• Have you selected the correct base branch per Contributing guidance?
• Have you set "Allow edits and access to secrets by maintainers"?
• Have you checked to ensure there aren't other open Pull Requests for the same update/change?
• Have you squashed any non-relevant commits and commit messages? [instructions]
• Have you added an explanation of what your changes do and why you'd like us to include them?
• If applicable, have all FedRAMP Documents Related to OSCAL Adoption affected by the changes in this issue have been updated.?
• If applicable, does this PR reference the issue it addresses and explain how it addresses the issue?

By submitting a pull request, you are agreeing to provide this contribution under the CC0 1.0 Universal public domain dedication.

[Gabeblis]

@Rene2mt As of right now, upstream allowed-values don't allow for a "ipv4-address", "ipv6-address", "fqdn", or "uri" prop in an internal service component. This constraint is blocked.

[wandmagic]

@Rene2mt As of right now, upstream allowed-values don't allow for a "ipv4-address", "ipv6-address", "fqdn", or "uri" prop in an internal service component. This constraint is blocked.

unfortunate we can't add them in? how can we get unblocked here?

[wandmagic]

constraint looks good, we can keep it in canary while its blocked upstream

[Rene2mt]

Good to go.