Automating STIG compliance and reporting