I am trying to work with OSCAP and I want to do vulnerabilities assessment in centos 7, Fedora and RHEL. I found it for RHEL in OpenSCAP site but my question is, Is it possible to do it in CentOS or Fedora. because apparently there is no OVAL file for them.
Yes. The OpenSCAP website specifically mentions how to install it on both Fedora and CentOS 7:
To download the OVAL files, run:
yum install scap-security-guide
I found this site which has some OVAL files, it is not exactly what i wanted (as I commented above I want a same checklist for these 3 OS) but I hope it would be useful for others.