Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion test/test-data/bad-audit-log.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: audit-log-bad
type: AuditLog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: "Invalid audit log: missing summary, criteria, and results"
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/bad-capability-invalid-group.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: EXAMPLE-CAPABILITY-CATALOG
type: CapabilityCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: Example Capability Catalog
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/bad-control-invalid-group.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: TEST-INVALID-GROUP
type: ControlCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: Control catalog with a control referencing an invalid group.
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/bad-enforcement-clear-failed.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: "enforcement-log-bad-clear"
type: EnforcementLog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: "Invalid enforcement log: Clear disposition with Failed assessment result"
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/bad-enforcement-log.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: "enforcement-log-bad-001"
type: EnforcementLog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: "Invalid enforcement log: action justification missing required log reference"
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/bad-enforcement-missing-log.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: "enforcement-log-bad-002"
type: EnforcementLog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: "Invalid enforcement log: action justification missing required log reference"
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/bad-lexicon-duplicate-term-id.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ title: Invalid lexicon with duplicate term ids
metadata:
id: bad-lexicon-dup
type: Lexicon
gemara-version: "1.0.0"
gemara-version: "1.1.0"
description: Term ids must be unique within the lexicon.
author:
id: gemara-example
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/bad-lifecycle.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: TEST-BAD-LIFECYCLE
type: GuidanceCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: Retired guideline with recommendations should fail validation.
author:
Expand Down
2 changes: 2 additions & 0 deletions test/test-data/bad-mapping-document.yaml
Original file line number Diff line number Diff line change
@@ -1,6 +1,8 @@
title: Invalid Mapping Document Without Mapping References
metadata:
id: INVALID-MAP-001
type: MappingDocument
gemara-version: "1.1.0"
version: "1.0.0"
description: This mapping document is missing mapping-references
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/bad-mapping-no-target.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ metadata:
id: TEST-MAP-001
version: "1.0.0"
type: MappingDocument
gemara-version: "0.20.0"
gemara-version: "1.1.0"
description: Test
author:
id: test
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/bad-no-groups.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: TEST-NO-FAMILIES
type: ControlCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: Control catalog with controls but no groups declared.
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/bad-principle-invalid-group.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ title: AI Governance Framework Principles
metadata:
id: AIR-PRIN
type: PrincipleCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
description: Core principles underpinning the FINOS AI Governance Framework.
version: 0.1.0
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/bad-threat-invalid-group.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: EXAMPLE-THREAT-CATALOG
type: ThreatCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: Example Threat Catalog
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-aigf-nist-mapping.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ metadata:
id: AIR-NIST-MAP-001
version: "0.1.0"
type: MappingDocument
gemara-version: "0.20.0"
gemara-version: "1.1.0"
description: >
Maps FINOS AI Governance Framework mitigations (guidelines) to
NIST SP 800-53 Revision 5 security and privacy controls.
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-aigf-principles.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: AI Governance Framework Principles
metadata:
id: AIR-PRIN
type: PrincipleCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
description: >
Core principles underpinning the FINOS AI Governance Framework.
Each principle represents a foundational value that one or more
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-aigf-vectors.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ title: AI Governance Framework Risk Vectors
metadata:
id: AIR-VEC
type: VectorCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: 0.1.0
description: >
AIGF risks expressed as Gemara vectors. Each vector describes a
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-aigf.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: FINOS-AIR
type: GuidanceCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
description: >
A comprehensive collection of risks and mitigations that support
on-boarding, development of, and running Generative AI solutions.
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-audit-log.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: audit-log-001
type: AuditLog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: "Q1 2026 Gemara Audit"
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-capability-catalog.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: EXAMPLE-CAPABILITY-CATALOG
type: CapabilityCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: Example Capability Catalog
author:
Expand Down
2 changes: 2 additions & 0 deletions test/test-data/good-ccc.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,8 @@
"title": "FINOS Cloud Control Catalog",
"metadata": {
"id": "FINOS-CCC",
"type": "ControlCatalog",
"gemara-version": "1.0.0",
"description": "FINOS CCC is an open standard project that describes consistent controls for\ncompliant public cloud deployments in the financial services sector.\n",
"author": {
"id": "finos",
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-ccc.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: FINOS-CCC
type: ControlCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "2024.1"
description: |
FINOS CCC is an open standard project that describes consistent controls for
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-enforcement-log.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: "enforcement-log-001"
type: EnforcementLog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: "Enforcement actions taken against pvtr evaluation findings for the Gemara repository"
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-lexicon.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ title: Example security lexicon
metadata:
id: example-lexicon-001
type: Lexicon
gemara-version: "1.0.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: >
Minimal lexicon illustrating the Gemara Lexicon artifact schema.
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-lifecycle.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: TEST-LIFECYCLE
type: ControlCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: Validates lifecycle states on controls and assessment requirements.
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-mapping-document.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ metadata:
id: OSPS-CRA-MAP-001
version: "1.0.0"
type: MappingDocument
gemara-version: "0.20.0"
gemara-version: "1.1.0"
description: >
Maps OSPS Baseline controls to essential cybersecurity requirements
in Annex I of the EU Cyber Resilience Act (Regulation 2024/2847).
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-osps.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: OSPS-B
type: ControlCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: |
The Open Source Project Security (OSPS) Baseline is a set of security
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-policy.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: "security-policy-001"
type: Policy
gemara-version: "0.20.0"
gemara-version: "1.1.0"
description: "Establish comprehensive information security controls and procedures to protect organizational assets"
version: "2.1.0"
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-risk-catalog.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: EXAMPLE-RISK-CATALOG
type: RiskCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: Example Risk Catalog for cloud-native container environments
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-security-policy.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: "data-protection-policy-002"
type: Policy
gemara-version: "0.20.0"
gemara-version: "1.1.0"
description: "Ensure compliance with data protection regulations and safeguard personal information"
version: "1.5.0"
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-threat-catalog.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: EXAMPLE-THREAT-CATALOG
type: ThreatCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
version: "1.0.0"
description: Example Threat Catalog
author:
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/good-vector-owasp-mapping.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ metadata:
id: AIR-OWASP-MAP-001
version: "0.1.0"
type: MappingDocument
gemara-version: "0.20.0"
gemara-version: "1.1.0"
description: >
Maps AIGF risk vectors to OWASP Top 10 for LLM Applications 2025
entries where a semantic relationship exists. Vectors without a
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/nested-empty.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: "empty-test-catalog"
type: ControlCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
description: "Minimal test catalog for edge case testing"
author:
id: test-author
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/nested-good-ccc.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: FINOS-CCC
type: ControlCatalog
gemara-version: "0.20.0"
gemara-version: "1.1.0"
description: |
FINOS CCC is an open standard project that describes consistent controls for
compliant public cloud deployments in the financial services sector.
Expand Down
2 changes: 1 addition & 1 deletion test/test-data/pvtr-baseline-scan.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
metadata:
id: PVTR-BASELINE-SCAN
type: EvaluationLog
gemara-version: 0.20.0
gemara-version: "1.1.0"
version: 1.0.0
description: PVTR baseline scan evaluation results
author:
Expand Down
Loading