search

GSA / fedramp-automation

FedRAMP Automation
https://www.fedramp.gov/using-the-fedramp-oscal-resources-and-templates/
Other
256 stars 74 forks source link

SAP validation error for locations in the associated SSP #450

Closed Telos-sa closed 8 months ago

Telos-sa commented 11 months ago

Describe the bug

When validating a FedRAMP OSCAL SAP, an error appears for a location not being in the associated SSP when only the SAP has been uploaded.

What version of OSCAL are you using?

OSCAL version 1.0.0

How do we replicate the issue?

  1. Run the following SAP through the validator: FedRAMP Example Project_OSCAL_SAP.json.zip

  2. The following error appears in 4.3.1:

    Screenshot 2023-07-18 at 16 47 32

Expected behavior (i.e. solution)

Assertions involving the associated SSP should not be marked as errors when only the SAP is uploaded. Passing this test would require a full package with artifacts to be able to perform a cross reference.

volpet2014 commented 8 months ago

This was addressed by relaxing validations to warnings in the Early Adopter's working group until Phase 3 of the OEAW process where we will be accepting full packages.