The openscap-scanner package can be installed with the following command:
$ apt-get install openscap-scanner
openscap-scanner contains the oscap command line tool. This tool is a configuration and vulnerability scanner, capable of performing compliance checking using SCAP content.