Just in case anyone was curious, severity tags are now assigned to all Rules. This should help ensure that the content meets the needs of customers who require this.
Earlier, "high" and "medium" values were manually added to the severity attribute for each XCCDF Rule (in line with corresponding DIACAP definitions and influenced by previous STIGs).
For other Rules (the majority), the shorthand2xccdf.xslt transform was tweaked to automatically add severity="low" if no severity was specified. So the default case should be easy for authoring.
This could easily be shown in the html tables ("spreadsheets" if you wish) too..
Jeff
scap-security-guide@lists.fedorahosted.org