usnistgov / OSCAL

Open Security Controls Assessment Language (OSCAL)
https://pages.nist.gov/OSCAL/
Other
677 stars 183 forks source link

Continue to refine M2-M3 upgrade pipeline #694

Closed wendellpiez closed 4 years ago

wendellpiez commented 4 years ago

User Story:

The SSP example at https://github.com/brianrufgsa/fedramp-automation/blob/sap-sar-poam/templates/ssp/xml/FedRAMP-SSP-OSCAL-Template.xml is showing that the upgrade pipeline (converting from Milestone 2 to Milestone 3 OSCAL) is defective in several respects.

Goals:

Complete this conversion while improving the upgrade tool (XSLT pipeline) to the extent practical.

Dependencies:

There are a couple of small tweaks that might be accomplished by hand in this conversion; but anything 'normal' should be handled by the pipeline.

Acceptance Criteria

{The items above are general acceptance criteria for all User Stories. Please describe anything else that must be completed for this issue to be considered resolved.}

wendellpiez commented 4 years ago

There are a couple of outstanding issues here to discuss with @david-waltermire-nist and @brianrufgsa, but this is mostly ready.

Specifically:

wendellpiez commented 4 years ago

There appear to be errors in the PR due to broken links in Markdown?

wendellpiez commented 4 years ago

Improvements having been merged this is probably closable.