oscal-compass / compliance-trestle

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.
https://oscal-compass.github.io/compliance-trestle
Apache License 2.0
168 stars 61 forks source link

Revising trestle plan to accommodate latest scenarios. #915

Open butler54 opened 2 years ago

butler54 commented 2 years ago

Conceptual design choices here need to make it into the developer documentation.

With the evolution of trestle 'SAGA' style orchestration has been excluded which was one of the original intents of plan. Most of this is dealt with by an external tool, such as a CI pipeline.

This produces a simpler usecase for trestle plan. It is principally to ensure that when managing multiple files if there is an error the files do not end up in an inconsistent state (e.g. we do not deal with external APIs - we primarily deal with the file system).

Under this scenario there are two likely forms of errors which we can handle:

With both of these scenarios we need to ensure that changes are non-destructive.

What we cannot handle easily:

Architectural design decisions:

Extension points required:

Trestle commands where it may be required:

github-actions[bot] commented 3 weeks ago

This issue has been automatically marked as stale because it has not had activity within 90 days. It will be automatically closed if no further activity occurs within 30 days.