compliance-trestle
compliance-trestle copied to clipboard
oscal-compass
An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.
## Issue description / feature objectives Currently set-parameters do not show properties or namespace in the markdown yaml header - but it is desirable to have the new "display-name" property...
## Issue description / feature objectives Currently we only allow setting the version as a string, with no checks on the string contents. There is need for automatic bumping of...
## Issue description / feature objectives Many of the command line arguments are bare strings in the code and should be const strings. ## Caveats / Assumptions ## Completion Criteria
## Issue description / feature objectives Produce one or component-definitions in a trestle workspace from. Arguments: --csv-file \ (required) ~~--profile \ (required)~~ --components “comp1:comp2” filter on CSV file to create...
## Issue description / feature objectives The current plan is to generate component definitions containing only one component from a spreadsheet. When generating an ssp it would simplify the workflow...
## Issue description / feature objectives Group id's are not required but titles are. The titles aren't required to be unique, but that is ok as long as sibling groups...
## Issue description / feature objectives OSCAL 1.0.4 is out and it fixes regex issues that are either old, or they were introduced in 1.0.3. They could cause a validation...
## Issue description / feature objectives Allow read of arbitrary control props using special tag in yaml header ## Caveats / Assumptions Currently two control props are handled specially: sort-id...
## Issue description / feature objectives A large ssp may contain many components, and ssp-filter allows reducing the number of them. There should be an option to declare the new,...
## Issue description / feature objectives Several of the authoring tools rely on internally generating the resolved profile catalog from a profile, but we don't have a command simply to...
Metadata
Owner
Metadata
An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.