Brian Ruf

Cleanup Items

1

This is a list of small clean-up items necessary before we formally announce the specification: - [ ] Revert longer `summary` text back to short statements. (Leave longer `description` text....

All PUT and POST methods require a requestBody element defining the data to be sent from the client to the server. - [ ] For all `PUT` and `POST` involving...

Address Licensing/ToS

1

### Description As an adopter of the OSCAL REST OpenAPI Specification I need some assurance that this specification will remain open sourced following my adoption of it, so that I...

AP Tasks Need Asset Linkage

1

### User Story As a developer of cATO capabilities using OSCAL, I need the ability to define which tool will be performing a specific task in the Assessment Plan model....

NIST SP 800-53 r4 and r5 Missing Label Property in Group

20

# Describe the bug While label properties are present for controls, the label property is missing from groups. # Who is the bug affecting? Tool developers and content consumers. #...

Added Label Properties to 800-53 Rev 4 Groups

1

# Committer Notes Added label properties to groups in NIST SP 800-53 r4, so that tools that honor the label property will have data to use. ### All Submissions: -...

Added Label Properties to 800-53 Rev 5 Groups

1

# Committer Notes Added label properties to groups in NIST SP 800-53 r5, so that tools that honor the label property will have data to use. ### All Submissions: -...

Better align the specification with the information found at [https://docs.oscal.io/docs/oscal-rest-openapi](https://docs.oscal.io/docs/oscal-rest-openapi)

Revised File Identifier Handling

14

### User Story As a tool developer, I want file identifiers to be more reliable and consistent across implementations, so that document references are more universal. ### Description Per a...