Number of missing controls

[tkokev]

I tried my hand at building an opencontrol based SSP but am confused on the results. after running compliance-masonry get then compliance-masonry diff <name of my certification> all controls in my certificate are listed under Number of missing controls even though I include them in my component.yaml.

To see if I did something wrong, I cloned down the cg-compliance repo and repeated the two compliance-masonry commands and surprisingly got the same results of all controls missing when diff'ing against FedRAMP-moderate or FedRAMP-low. Finally, I repeated the process against freedonia-compliance for the FredRAMP-low certification but got the desired Number of missing controls: 0 result.

Should cg-compliance be reporting all controls as missing?