search

defenseunicorns / lula

The Compliance Validator
Apache License 2.0
121 stars 21 forks source link

Override validation #348

Open brandtkeller opened 3 months ago

brandtkeller commented 3 months ago

Support for the ability to override a specified validation with a new target validation.

Purpose

There will be workflows and instances in support of targeting OSCAL files in remote repositories, where we want to override a given validation with a new validation that has context for a given configuration.

Objective

Likely processed in-memory after all of the target OSCAL artifacts have been processed -> this should allow replacement of a validation such that the replace validation never executes and the results include only the new validation.

brandtkeller commented 2 months ago

Given the ability to "import" component-definitions into one-another. Could overrides be a subset activity of matching UUID's for an implemented-requirement (or other field) and choosing to select the validation for that of the artifact "importing"?