Michaela Iorga
Michaela Iorga
@RS-Credentive - Thank you for your question. The code you point to was inserted 3years 7 months ago by a team member no longer with us. I will need to...
Does it make sense to use the OSCAL YAML schema for validation. In the examples I created long ago, I included a Makefile that invokes the oscal-cli tool for validation...
> Does anyone know if OSCAL has any plan to integrate with OpenTelemetry? Thanks! @gyliu513 - At this time, NIST does not have a plan to support OTel, but if...
> This came up in a FedRAMP implementers meeting and sounds interesting (at least personally to me, I am one of those OTEL people in personal lab environments from time...
> @iMichaela do you have some meeting notes or github links for CNCF OSCAL WGs? Thanks [@jflowers](https://github.com/jflowers) leads the cncf/tag-security [OSCAL Norms project](https://github.com/cncf/tag-security/issues/1277). I raised the issue today and I...
> > Thanks @aj-stein-gsa and @iMichaela for the discussion here, really helpful. Let me share a use case here: > > Suppose I have a VM, and I was using...
> This is a good point. Yes, we can get same data from different sources, I think that is why we need [semantic](https://github.com/open-telemetry/semantic-conventions) convention and data correlation to mitigate those...
@ogijaoh - You are absolutely right, and to my understanding, the proposal, as clarified after some discussion (see above) is focusing on the ability to use OSCAL assessment plan information...
The snippet of OSCAL SSP provided in this issue is taken from a tutorial and it si valid. `oscal-cli` [release 1.0.3](https://github.com/usnistgov/oscal-cli/releases/tag/v1.0.3) validates with no errors the sample provided: ```xml Product...
@Telos-sa - Please provide the `oscal-cli` version. Not clear this is an OSCAL bug. Further analysis is needed. Looking at the example above, I am guessing it is a FedRAMP...