compliance-trestle
compliance-trestle copied to clipboard
An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.
## Describe the bug Investigate if possible to point at using the schema directly coming from nist-source instead of using a downloaded json schema. Probably not going to be able...
## Issue description / feature objectives We've got ourselves into a bit of a place were we are hacking around insufficiencies in DMCG and the complexity of the OSCAL schema....
## Issue description / feature objectives The README.md for the compliance-trestle leg of oscal-compass should be commensurate with the community landing page at https://github.com/oscal-compass/community ## Caveats / Assumptions The community...
## Issue description / feature objectives The objective would be to add a separate file for managing OSCAL metadata that can be used in conjunction with the control markdown. ##...
## Issue description / feature objectives When editing the YAML header with `trestle` generate commands, it would be helpful to be able to allow users to specify responsible-roles information at...
## Describe the bug The csv_to_oscal_cd task produces an component definition that is not [well-formed ](https://pages.nist.gov/OSCAL/resources/concepts/validation/)when a profile is specified for a rule with no mapped controls. This issue is...
## Issue description / feature objectives Add authoring support for the OSCAL [Plan of Action and Milestones](https://pages.nist.gov/OSCAL-Reference/models/v1.1.1/plan-of-action-and-milestones/) model ## Caveats / Assumptions N/A ## Completion Criteria - [ ] High-level...
Bumps [python-semantic-release/python-semantic-release](https://github.com/python-semantic-release/python-semantic-release) from 9.8.8 to 9.12.0. Release notes Sourced from python-semantic-release/python-semantic-release's releases. v9.12.0 (2024-10-18) Features changelog: add autofit_text_width filter to template environment (#1062, 83e4b86) Bug Fixes changelog: ignore commit exclusion...
## Types of changes - [ ] Hot fix (emergency fix and release) - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking...
## Issue description / feature objectives 1. trestle rules must support multiple checks per rule-id for a validation component, and rule_ids need not be unique across components (validation and non-validation)...