opencontrol / compliance-masonry

Security Documentation Builder
Other
350 stars 82 forks source link

Consider enhancing "dependencies" to support local filesystem references #369

Closed aegershman closed 3 years ago

aegershman commented 4 years ago

conceptual continuation of #368

In order for opencontrol to declare dependencies of other certifications, standards, systems, but not make the retrieval through git as the mechanism, consider enabling a dependency to be a local filesystem path. That way, in situations like #368 where the dependencies of other systems are pulled in through other mechanisms, such as vendir, git submodules, or just a different folder, it can still be declared as a dependency rather than as a component of the same system.

Just putting the thought out there for the backlog. Thanks 👍

EDIT just noticed there may be a discussion item for this in https://github.com/opencontrol/discuss/issues/41

redhatrises commented 4 years ago

Could be wrong, but I believe this capability for local filesystem retrieval is already there. I had an example somewhere, but can't find it right now.

yruss972 commented 3 years ago

It doesn't work for systems but would be much appreciated IMO.