tag the tests which belongs to a host and to a container

[atomic111]

add a tag for each test, something like:

tag 'host' for the host security tests

and

tag 'container' for the container security tests

[chris-rock]

Should we add an attribute to define that and assume the host by default?

[atomic111]

@chris-rock this sounds also as good idea

[aaronlippold]

I would say use the numbers to make that call. If it is about 50/50 then add a tag on each control. If its heavy to one side, make the tag an exception. But I would guess since it is not data that changes, the work to just add a tag to each control would be the best route given that it is a one time event.