search

opencybersecurityalliance / PACE

Posture Attribute Collection and Evaluation
Other
23 stars 4 forks source link

Can there be more than one OCA PACE reference implementations? #44

Closed sparrell closed 2 years ago

sparrell commented 2 years ago

Should PACE have just one reference implementation or can it have more than one repo with more than one way to accomplish PACE?

Note this is an independent issue from whether there should be one standard database which is a separate issue.

For example PACE could decide to allow relational, labeled property graph, or RDF graph databases as long as they met a interface we define; and yet could still decide to have only one reference implementation (eg a Neo4j labeled property graph). Conversely it could decide to standardize on one database (eg a particular Neo4j labeled property graph schema) and still have two different open source PACE repos with different implementations of that database as long as it met the interface standards.

This issue is to decide whether to allow more than one reference implementations.

This issue is related to issues #42 and #43

sparrell commented 2 years ago

I recommend more than one if possible. It may be only one is "production quality" but we should have several that are at least "proof of concept" quality.

davaya commented 2 years ago

Is it a goal of either the PACE project or the June CAW to develop and distribute any reference implementation? At least for now I prefer the goals to be 1) interface definitions and 2) PoC implementations that fully implement those interfaces. To the extent that PoCs are used in future interoperability events they could be considered partial "references" in that they were first, but even those PoCs should be subject to revision if warranted.

slarchacki22 commented 2 years ago

03/28/2022 - Talked about there should be multiple implementations.

adammontville commented 2 years ago

Is this now resolved?

dlemire60 commented 2 years ago

@adammontville This and several other issues are resolved, but the approach to documenting the resolution in visible form hasn't quite been worked out, so hadn't closed them.

slarchacki22 commented 2 years ago

Added to FAQ at the 4/25/2022 PACE meeting

adammontville commented 1 year ago

I think interface definitions (based on an event driven approach) and PoC implementation(s) are the primary goals.

On Mar 18, 2022, at 7:22 PM, David Kemp @.***> wrote:

Is it a goal of either the PACE project or the June CAW to develop and distribute any reference implementation? At least for now I prefer the goals to be 1) interface definitions and 2) PoC implementations that fully implement those interfaces.

— Reply to this email directly, view it on GitHub https://github.com/opencybersecurityalliance/PACE/issues/44#issuecomment-1072901482, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAQVELBDMZIKYLXPIR5AQQLVAUM4BANCNFSM5Q4EQJ2Q. Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub. You are receiving this because you are subscribed to this thread.