Discovery for Report/Visual Creation

[CloudBeard]

What

Need for outputting the data obtained from the OSCAL and validations to create high level reports and possible graphical high level representations.

How

Taking something in theory like the Compliance MD Generator's logic and grabbing those results from OSCAL and Validations using Lula would enable us to create these reports. That logic would also be useful for GUI integration at a later date.

Visualization piece of an SVG bar graph. Possibly a GitHub action or custom piece to take the data from Lula to create this image?

Note

This is not meant to be a replacement for a GRC tool or proper visualization with a GUI of some sort. This is for a quick and easy way to showcase controls for groups like Delivery or anyone who just needs the quick metrics.

[brandtkeller]

Relates to #223 - My opinion is that we should develop some of the underlying foundation for provenance/accuracy of the data we are looking to report before attempting to visualize.

[CloudBeard]

100% agree, need the data before reporting on it.