I was given direction that bitbucket data center/server should be STIG checked against the Apache/Tomcat STIG, as well as the Web Server and Application Server STIG. Can anyone give specific guidance on how to get this accomplished? And if the aforementioned STIGs are the most applicable STIGs to run against bitbucket data center/server?
