A streamlined Digital Sovereignty assessment tool focused on providing organizations with a quick and actionable readiness evaluation.
This tool helps organizations evaluate their digital sovereignty posture across 7 critical domains in just 10-15 minutes.
The landing page features the Digital Sovereignty Readiness Assessment.
The assessment questionnaire presents 21 questions across 7 domains with Yes/No/"Don't Know" response options. Progress is auto-saved to browser storage.
Comprehensive results display showing scoring, maturity level, domain analysis, and actionable recommendations.
Professional PDF report with scores, domain breakdown, maturity level assessment, and tailored improvement actions.
- Quick Assessment: Complete evaluation in 10-15 minutes
- 7 Critical Domains: Comprehensive coverage across:
- Data Sovereignty
- Technical Sovereignty
- Operational Sovereignty
- Assurance Sovereignty
- Open Source Strategy
- Executive Oversight
- Managed Services
- 21 Key Questions: 2-3 targeted questions per domain
- Multiple Response Options: Yes/No/"Don't Know" format
- Instant Scoring: Real-time maturity level calculation
- Maturity Levels: Foundation, Developing, Strategic, Advanced
- Actionable Recommendations: Tailored guidance based on assessment results
- Research Questions: Track "Don't Know" responses for follow-up investigation
- PDF Export: Professional downloadable reports
- Progress Auto-Save: Browser-based session persistence
- Keyboard Navigation: Arrow keys for quick navigation, Ctrl+S to save
-
Clone the repository:
$ git clone https://github.com/redhat-cop/viewfinder-upstream.git $ cd viewfinder-upstream -
Build the container:
podman build -t viewfinder-upstream:latest . -
Run the container:
podman run -p 8080:8080 --name viewfinder-upstream viewfinder-upstream:latest
-
Access the application:
http://localhost:8080
- PHP 8.1 or higher
- Apache or Nginx web server
- Composer (for dependency management)
-
Clone or extract the application:
cd /var/www/html/viewfinder-upstream $ cd <your working directory> $ git clone https://github.com/redhat-cop/viewfinder-upstream.git $ # Copy files from your working directory to your apache directory $ cp -r viewfinder-upstream /var/www/html/ $ cd /var/www/html/viewfinder-upstream
-
Install dependencies:
composer install --no-dev --optimize-autoloader
Note: If you encounter a "composer.lock does not contain valid JSON" error, the lock file may have been corrupted during file transfer. Fix it by running:
rm composer.lock composer install --no-dev --optimize-autoloader
-
Set file permissions:
# Set ownership (adjust user/group for your system) sudo chown -R apache:apache /var/www/html/viewfinder-upstream # Set directory permissions sudo chmod 755 /var/www/html/viewfinder-upstream sudo chmod 775 /var/www/html/viewfinder-upstream/logs # Set file permissions find /var/www/html/viewfinder-upstream -type f -exec chmod 644 {} \;
-
Configure web server:
- See Web Server Configuration below
-
Access the application:
http://your-server/viewfinder-upstream -
Build the container:
cd /var/www/html/viewfinder-upstream podman build -t viewfinder-upstream:latest .
-
Run the container:
podman run -d -p 8080:8080 --name viewfinder-upstream viewfinder-upstream:latest
-
Access the application:
http://localhost:8080
VirtualHost Example (/etc/httpd/conf.d/viewfinder-upstream.conf):
<VirtualHost *:80>
ServerName viewfinder-upstream.example.com
DocumentRoot /var/www/html/viewfinder-upstream
<Directory /var/www/html/viewfinder-upstream>
Options -Indexes +FollowSymLinks
AllowOverride All
Require all granted
# Security headers
Header always set X-Content-Type-Options "nosniff"
Header always set X-Frame-Options "SAMEORIGIN"
Header always set X-XSS-Protection "1; mode=block"
</Directory>
# Logging
ErrorLog /var/log/httpd/viewfinder-upstream-error.log
CustomLog /var/log/httpd/viewfinder-upstream-access.log combined
</VirtualHost>Server Block Example (/etc/nginx/conf.d/viewfinder-upstream.conf):
server {
listen 80;
server_name viewfinder-upstream.example.com;
root /var/www/html/viewfinder-upstream;
index index.php;
# Security headers
add_header X-Content-Type-Options "nosniff" always;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-XSS-Protection "1; mode=block" always;
location / {
try_files $uri $uri/ /index.php?$query_string;
}
location ~ \.php$ {
fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}
# Deny access to sensitive files
location ~ /\. {
deny all;
}
# Logging
access_log /var/log/nginx/viewfinder-upstream-access.log;
error_log /var/log/nginx/viewfinder-upstream-error.log;
}viewfinder-upstream/
├── index.php # Landing page
├── composer.json # PHP dependencies
├── composer.lock # Dependency lock file
├── Dockerfile # Container build configuration
├── README.md # This file
├── CHANGES.md # Change log
├── IMPLEMENTATION_SUMMARY.txt # Implementation details
│
├── ds-qualifier/ # Digital Sovereignty Readiness Assessment
│ ├── index.php # Assessment questionnaire interface
│ ├── results.php # Results and recommendations page
│ ├── config.php # Questions configuration
│ ├── generate-pdf.php # PDF report generator
│ ├── css/
│ │ └── ds-qualifier.css # Assessment-specific styles
│ └── js/
│ └── ds-qualifier.js # Interactive features & auto-save
│
├── includes/ # Core backend classes
│ ├── Config.php # Application configuration
│ ├── Security.php # Security utilities
│ ├── Logger.php # Logging functionality
│ └── Exceptions/ # Custom exception classes
│ ├── ViewfinderException.php
│ ├── FileSystemException.php
│ ├── DataValidationException.php
│ ├── ConfigurationException.php
│ └── ViewfinderJsonException.php
│
├── css/ # Shared stylesheets
│ ├── bootstrap.min.css # Bootstrap framework
│ ├── brands.css # Font Awesome brands
│ ├── style.css # Main application styles
│ ├── tab-dark.css # Dark theme tab styling
│ ├── patternfly.css # Red Hat PatternFly design system
│ └── patternfly-addons.css # PatternFly extensions
│
├── js/ # Shared JavaScript files
│
├── images/ # Images and logos
│ └── screenshots/ # Documentation screenshots
│ ├── landing-page-balanced.png
│ ├── assessment-page.png
│ ├── results-page1.png
│ ├── results-page2.png
│ ├── results-page3.png
│ └── pdf-report-sample.png
│
├── error-pages/ # Error handling pages
│ └── error-handler.php
│
├── logs/ # Application logs (created at runtime)
│
└── vendor/ # Composer dependencies (created by composer install)
Navigate to the root URL to access the landing page featuring the Digital Sovereignty Readiness Assessment card.
- Start Assessment: Click "Start Assessment" button to begin
- Answer Questions: Progress through 7 domains
- Use Next/Previous buttons to navigate
- Answer Yes/No or select "Don't Know" for uncertain items
- Questions are validated before proceeding
- Progress auto-saves to browser storage
- Submit: Click "Complete Assessment" on the final section
- View Results: Review your maturity level and recommendations
- Download Report: Generate PDF report for stakeholders
- Take New Assessment: Start fresh assessment anytime
Based on your score (0-21 points):
-
Foundation (0-5 points): Early-stage maturity
- Ad-hoc processes with minimal sovereignty controls
- Significant dependencies on external providers
- Focus: Establish executive awareness and basic policies
-
Developing (6-10 points): Growing maturity
- Basic controls are in place but not yet standardized
- Projects are planned but processes may not be repeatable organization-wide
- Focus: Build repeatable practices and implement foundational controls
-
Strategic (11-16 points): Mature posture
- Processes are well characterized, understood, documented, and standardized
- Digital sovereignty practices are consistent and repeatable across the organization
- Clear governance structures and policies are in place
- Focus: Ensure organization-wide consistency and pursue certifications
-
Advanced (17-21 points): Leading maturity
- Continuous improvement through quantitative feedback and innovation
- Proactive identification and deployment of innovative sovereignty practices
- Industry-leading posture with thought leadership contributions
- Focus: Drive innovation and lead industry best practices
- Score Breakdown: Percentage-based maturity indicator
- Domain Analysis Table: Shows score and maturity level per domain
- Progress bars show percentage completion per domain
- Improvement Actions: Recommended next steps based on maturity level
- Domain Insights: Detailed view of strengths and improvement areas
- Research Questions: "Don't Know" responses flagged for further investigation
Edit includes/Config.php to modify:
- Application name and version
- Base paths
- Error handling settings
- Security configuration
Edit ds-qualifier/config.php to customize:
- Question text
- Domain definitions
- Tooltips and help text
- PHP: ^8.1
- Extensions: ext-json
- monolog/monolog (^3.5): Logging framework
- dompdf/dompdf (^3.1): PDF report generation
- jQuery 3.6.0
- jQuery UI 1.13.2
- Font Awesome 8.x
- Bootstrap (included locally)
- PatternFly (included locally)
- Input Validation: Comprehensive sanitization of all user inputs
- CSRF Protection: Session-based CSRF token validation
- Secure Headers: X-Content-Type-Options, X-Frame-Options, X-XSS-Protection
- Path Traversal Prevention: Secure file path handling
- Error Logging: Detailed logging without exposing sensitive data
- Session Timeout: Automatic session expiration (1 hour)
- Secure File Operations: Atomic file writes with rollback capability
| Feature | Full Viewfinder | Viewfinder Lite |
|---|---|---|
| Profile Management | ✓ | ✗ |
| Full Maturity Assessments | ✓ | ✗ |
| Readiness Assessment | ✓ | ✓ |
| Digital Sovereignty Quiz | ✓ | ✗ |
| Operation Sovereign Shield | ✓ | ✗ |
| Compliance Framework Mapping | ✓ | ✗ |
| Line of Business Content | ✓ | ✗ |
| Approximate Size | ~100+ MB | ~60-65 MB |
Issue: Permission denied errors
# Solution: Set correct ownership and permissions
sudo chown -R apache:apache /var/www/html/viewfinder-upstream
sudo chmod 755 /var/www/html/viewfinder-upstream
sudo chmod 775 /var/www/html/viewfinder-upstream/logsIssue: Composer dependencies not found
# Solution: Run composer install
cd /var/www/html/viewfinder-upstream
composer install --no-dev --optimize-autoloaderIssue: PDF generation fails
# Solution: Check dompdf is installed
composer show dompdf/dompdf
# If not found, reinstall dependencies
composer install --no-dev --optimize-autoloaderIssue: Sessions not persisting
# Solution: Check session directory permissions
sudo chmod 1733 /var/lib/php/session # For RHEL/CentOS
sudo chmod 1733 /var/lib/php/sessions # For Debian/UbuntuView application logs for troubleshooting:
# View recent logs
tail -f /var/www/html/viewfinder-upstream/logs/app.log
# Search for errors
grep ERROR /var/www/html/viewfinder-upstream/logs/app.log
# View web server logs
tail -f /var/log/httpd/error_log # Apache (RHEL/CentOS)
tail -f /var/log/apache2/error.log # Apache (Debian/Ubuntu)
tail -f /var/log/nginx/error.log # Nginx- Edit
ds-qualifier/config.php - Add questions to the appropriate domain
- Follow the existing format:
'questions' => [ [ 'id' => 'unique-id', 'text' => 'Your question text?', 'tooltip' => 'Helpful explanation' ] ]
- Main application: Edit
css/style.css - Assessment interface: Edit
ds-qualifier/css/ds-qualifier.css - Dark theme: Edit
css/tab-dark.css
Edit ds-qualifier/results.php to adjust:
- Score thresholds
- Maturity level names
- Recommendations per level
Apache-2.0 License - Red Hat
This is a community-supported open source project. For issues, questions, or feature requests:
- GitHub Issues: https://github.com/redhat-cop/viewfinder-upstream/issues
- GitHub Discussions: https://github.com/redhat-cop/viewfinder-upstream/discussions
- Red Hat Community of Practice: https://github.com/redhat-cop
For enterprise support and the enhanced CMMI version, contact your Red Hat representative. For issues, questions, or feature requests, please refer to the main Viewfinder project documentation or contact your Red Hat representative.
This application is provided for informational purposes only. The information is provided "as is" with no guarantee or warranty of accuracy, completeness, or fitness for a particular purpose. Users should conduct their own validation and testing before relying on assessment results for decision-making.
Viewfinder Lite - Streamlined Digital Sovereignty Readiness Assessment
Version: 1.0.0





