feat: Add OSCAL to each commit

cloud-native-security-controls / controls-catalog

Apache License 2.0

16 stars 7 forks source link

feat: Add OSCAL to each commit #32

Closed JonZeolla closed 8 months ago

brandtkeller commented 8 months ago

I like the automation - the upload-artifact use of the zip feels kinda silly (given the minute space savings) but looks a constraint of the action - so no big deal there.

Curious on your explicit use of 1.0.4 of OSCAL versus a new version? Are there dependencies to this version that prevent using a newer release?

JonZeolla commented 8 months ago

@brandtkeller it's the latest that compliance-trestle supports

https://github.com/IBM/compliance-trestle#important-note

brandtkeller commented 8 months ago

Makes sense! thanks for the context. Working with versions myself currently and may need to ping the trestle team to see what their experience is.

JonZeolla commented 8 months ago

@brandtkeller awesome. Yeah this is definitely MVP for now but once it ships then we can iterate on modernizing the version of OSCAL, adding more helpful metadata, etc.