Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add statement-has-this-system-component Constraint #1015

Merged
merged 1 commit into from
Dec 19, 2024

Conversation

Gabeblis
Copy link
Contributor

Committer Notes

Purpose

This PR aims to add the statement-has-this-system-component constraint which ensures that every control implementation statement has one "this-system" by-component.

Changes

Added constraint:

  • statement-has-this-system-component

Added valid/invalid test content:

  • ssp-statement-has-this-system-component-INVALID.xml
  • Edited fedramp-ssp-example.oscal.xml to align with the above constraint.

Added yaml files for testing:

  • Pass/fail yaml tests added for each of the above constraints.

All Submissions:

By submitting a pull request, you are agreeing to provide this contribution under the CC0 1.0 Universal public domain dedication.

@Gabeblis Gabeblis self-assigned this Dec 17, 2024
@Gabeblis Gabeblis requested a review from a team as a code owner December 17, 2024 15:44
@Gabeblis Gabeblis force-pushed the constraints/issue-1007 branch from c5410b0 to 0687914 Compare December 17, 2024 15:50
Rene2mt
Rene2mt previously approved these changes Dec 17, 2024
aj-stein-gsa
aj-stein-gsa previously approved these changes Dec 18, 2024
@Gabeblis Gabeblis dismissed stale reviews from aj-stein-gsa and Rene2mt via 644906b December 19, 2024 03:53
@Gabeblis Gabeblis force-pushed the constraints/issue-1007 branch from 0687914 to 644906b Compare December 19, 2024 03:53
@wandmagic wandmagic merged commit f6f7bb6 into GSA:develop Dec 19, 2024
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Security Controls - SSP control implementation statements have one "this-system" by-component
4 participants