... since evaluation of the XCCDF profiles is broken at the moment.
The XCCDF spec says that the first check type should be chosen, and this will mean putting OVAL first. This is also logical since automated checks are preferable to manual ones that are defined in OCIL.
This should only be a few lines of XSLT in transforms/shorthand2xccdf.xslt, but I thought I'd mention that I'm aware of it.
scap-security-guide@lists.fedorahosted.org