Created redmine issue http://projects.theforeman.org/issues/21116 from this bug
I think this should have UI toggle associated with. You don't want your client system to donwload thing from internet without your explicit consent. At least in Satellite 5 product line, this was the case.
*** Bug 1576874 has been marked as a duplicate of this bug. ***
Moving this bug to POST for triage into Satellite 6 since the upstream issue http://projects.theforeman.org/issues/21116 has been resolved.
Connecting redmine issue https://projects.theforeman.org/issues/25959 from this bug
FailedQA @satellite 6.5.0 snap 13 @puppet-foreman_scap_client-0.3.19-1.el7sat.noarch.rpm
Verified @satellite 6.5.0 snap 20 @rubygem-foreman_scap_client-0.4.3-1.el7sat.noarch @puppet-foreman_scap_client-0.3.19-1.el7sat.noarch steps: 1. to download content from remote location for client(host) overide Smart Class Parameter fetch_remote_resources to true. observation: - content from remote location got downloaded -[root@sat_host ~]# foreman_scap_client 3 DEBUG: running: oscap xccdf eval --fetch-remote-resources --profile xccdf_org.ssgproject.content_profile_rht-ccp --results-arf /tmp/d20190319-27275-12nds5g/results.xml /var/lib/openscap/content/96c2a9d5278d5da905221bbb2dc61d0ace7ee3d97f021fccac994d26296d986d.xml Downloading: https://www.redhat.com/security/data/oval/com.redhat.rhsa-RHEL7.xml.bz2 ... ok DEBUG: running: /usr/bin/env bzip2 /tmp/d20190319-27275-12nds5g/results.xml Uploading results to https://sat_hostname.com:9090/compliance/arf/3 Report uploaded, report id: 92
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2019:1222