Josh Pavel

We will need pipeline checks for our PR process. @magnologan has done some initial work; that should be officially evaluated and merged as applicable.

I believe this leads to documentation and the greater question, "what does supported mean" and what does that look like.

https://github.com/ocsf/ocsf-schema/discussions/190 https://github.com/ocsf/ocsf-schema/discussions/191 https://github.com/ocsf/ocsf-schema/discussions/192

Cleaned up thanks to @rroupski 's work above.

I believe this is worthy of making a new proposal for the OCSF plan for sane defaults.

Interesting thought; there is a lot to consider here. I agree with the idea that keeping the cloud category for a very small number of potential sources seems to be...

I believe the most common use case is that analysts (human and software) will process CloudTrail and similar sources holistically, and will most likely not benefit from separating the source...

String enums siblings have been addressed with #450

String enums siblings have been addressed with #450