Add more guidelines

[XoMEX]

It would be nice to not only check nist/bsi guidelines, but more. Concrete wishes

• dutch
• british
• custom (common in banking sector)

I'd suggest starting a format for custom guidelines, moving the existing guidelines to that format, and then add new guidelines in the custom format. already done

We have to check whether the existing format is sufficient. Our contact proposed other formats, which we might want to look at.

you are right, I've suggested the OSCAL, but recently we experimented a bit with CycloneDX SBOM object Definitions (https://cyclonedx.org/specification/overview/) for the similar purpose of supporting custom standard compliance check within one of our tools and so far we are quite happy with it, so this is also something I could recommend to have a look at

[XoMEX]

Currently got a student working on this. Likely will switch to an architecture with two supplementary files: One agnostic to tls-scanner describing the requirements, and one file mapping the requirements to the properties in tls-scanner.