-
Notifications
You must be signed in to change notification settings - Fork 133
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
4fe9619
commit ef587f0
Showing
8 changed files
with
2,229 additions
and
2,208 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,21 @@ | ||
| # default | ||
| * text=auto | ||
|
|
||
| # structured formats | ||
| *.js text eol=lf | ||
| *.json text eol=lf | ||
| *.xml text eol=lf | ||
| *.yaml text eol=lf | ||
| *.yml text eol=lf | ||
|
|
||
| # markdown | ||
| *.md text eol=lf | ||
|
|
||
| # script files | ||
| *.sh text eol=lf | ||
| /build/ci-cd/config/* text eol=lf | ||
|
|
||
| # other binary files | ||
| *.png binary | ||
| *.jpg binary | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,19 +1,19 @@ | ||
|  | ||
|
|
||
| # OSCAL Examples | ||
|
|
||
| This directory contains numerous OSCAL examples in XML, JSON, and YAML formats. | ||
|
|
||
| Some examples are considered provisional "finished" versions of OSCAL catalogs and profiles; they are not authoritative but are intended as demonstrations of OSCAL. Other examples are works in progress. Each subdirectory within the examples directory clearly indicates the current status of its example files. | ||
|
|
||
| These files are maintained by a Continuous Integration and Continuous Deployment (CI/CD) process that automatically converts source content into the alternate formats found in the many subdirectories of this repository. As a result, these example files should not be modified. Instead, the source of the file should be edited in the [src](src) subdirectories. | ||
|
|
||
| The structure and contents of the examples directory are as follows: | ||
|
|
||
| - [examples](examples): This directory contains sample OSCAL content organized by OSCAL model. | ||
| - [fedramp.gov](fedramp.gov): This directory contains OSCAL examples of the low, moderate, and high baselines defined by the Federal Risk and Authorization Management Program (FedRAMP). | ||
| - [nist.gov/SP800-53/rev4](nist.gov/SP800-53/rev4): This directory contains OSCAL examples of the catalog, and low, moderate, and high baselines defined by NIST Special Publication (SP) [800-53 Revision 4](https://csrc.nist.gov/publications/detail/sp/800-53/rev-4/final). | ||
| - [nist.gov/SP800-53/rev5](nist.gov/SP800-53/rev5): This directory contains OSCAL examples of the catalog, and low, moderate, and high baselines defined by NIST Special Publication (SP) [800-53 Revision 5](https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final[) and [SP 800-53B](https://csrc.nist.gov/publications/detail/sp/800-53b/final) respectively. | ||
| - [nist.gov/SP800-53/rev5/draft](nist.gov/SP800-53/rev5/draft): Earlier releases of draft content for the Final Public Draft (FPD) version of the Revision 5 catalog and baselines. These drafts, are now superseded by the final versions above, and are provided for reference only. | ||
| - [src](src): This directory contains the source files for all the OSCAL examples located in this repository. | ||
|
|
||
|  | ||
|
|
||
| # OSCAL Examples | ||
|
|
||
| This directory contains numerous OSCAL examples in XML, JSON, and YAML formats. | ||
|
|
||
| Some examples are considered provisional "finished" versions of OSCAL catalogs and profiles; they are not authoritative but are intended as demonstrations of OSCAL. Other examples are works in progress. Each subdirectory within the examples directory clearly indicates the current status of its example files. | ||
|
|
||
| These files are maintained by a Continuous Integration and Continuous Deployment (CI/CD) process that automatically converts source content into the alternate formats found in the many subdirectories of this repository. As a result, these example files should not be modified. Instead, the source of the file should be edited in the [src](src) subdirectories. | ||
|
|
||
| The structure and contents of the examples directory are as follows: | ||
|
|
||
| - [examples](examples): This directory contains sample OSCAL content organized by OSCAL model. | ||
| - [fedramp.gov](fedramp.gov): This directory contains OSCAL examples of the low, moderate, and high baselines defined by the Federal Risk and Authorization Management Program (FedRAMP). | ||
| - [nist.gov/SP800-53/rev4](nist.gov/SP800-53/rev4): This directory contains OSCAL examples of the catalog, and low, moderate, and high baselines defined by NIST Special Publication (SP) [800-53 Revision 4](https://csrc.nist.gov/publications/detail/sp/800-53/rev-4/final). | ||
| - [nist.gov/SP800-53/rev5](nist.gov/SP800-53/rev5): This directory contains OSCAL examples of the catalog, and low, moderate, and high baselines defined by NIST Special Publication (SP) [800-53 Revision 5](https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final[) and [SP 800-53B](https://csrc.nist.gov/publications/detail/sp/800-53b/final) respectively. | ||
| - [nist.gov/SP800-53/rev5/draft](nist.gov/SP800-53/rev5/draft): Earlier releases of draft content for the Final Public Draft (FPD) version of the Revision 5 catalog and baselines. These drafts, are now superseded by the final versions above, and are provided for reference only. | ||
| - [src](src): This directory contains the source files for all the OSCAL examples located in this repository. | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,16 +1,16 @@ | ||
|  | ||
|
|
||
| # OSCAL Content Sources | ||
|
|
||
| This directory contains the source files for all the OSCAL content located in this repository. | ||
|
|
||
| **Automated:** The source for a given file is in one of the supported XML, JSON, or YAML formats. The Continuous Integration and Continuous Deployment (CI/CD) scripting automatically converts these content sources into the alternate formats. As a result, the example files, who's directories are located in the root directory of this repository, should not be modified. Instead, the source of the file should be edited here. | ||
|
|
||
| The contents of this directory are as follows: | ||
|
|
||
| - [config](config): This configuration file identifies which content files the CI/CD process needs to convert into alternate formats. | ||
| - [examples](examples): This directory contains sample OSCAL content organized by OSCAL model. | ||
| - [fedramp.gov](fedramp.gov): This directory contains OSCAL the low, moderate, and high baselines defined by the [Federal Risk and Authorization Management Program](https://www.fedramp.gov/) (FedRAMP). | ||
| - [nist.gov/SP800-53/rev4](nist.gov/SP800-53/rev4): This directory contains OSCAL examples of the catalog, and low, moderate, and high baselines defined by NIST Special Publication (SP) [800-53 Revision 4](https://csrc.nist.gov/publications/detail/sp/800-53/rev-4/final). | ||
| - [nist.gov/SP800-53/rev5](nist.gov/SP800-53/rev5): This directory contains OSCAL examples of the catalog, and low, moderate, and high baselines defined by NIST Special Publication (SP) [800-53 Revision 5](https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final[) and [SP 800-53B](https://csrc.nist.gov/publications/detail/sp/800-53b/final) respectively. | ||
| - [nist.gov/SP800-53/rev5/draft](nist.gov/SP800-53/rev5/draft): Earlier releases of draft content for the Final Public Draft (FPD) version of the Revision 5 catalog and baselines. These drafts, are now superseded by the final versions above, and are provided for reference only. | ||
|  | ||
|
|
||
| # OSCAL Content Sources | ||
|
|
||
| This directory contains the source files for all the OSCAL content located in this repository. | ||
|
|
||
| **Automated:** The source for a given file is in one of the supported XML, JSON, or YAML formats. The Continuous Integration and Continuous Deployment (CI/CD) scripting automatically converts these content sources into the alternate formats. As a result, the example files, who's directories are located in the root directory of this repository, should not be modified. Instead, the source of the file should be edited here. | ||
|
|
||
| The contents of this directory are as follows: | ||
|
|
||
| - [config](config): This configuration file identifies which content files the CI/CD process needs to convert into alternate formats. | ||
| - [examples](examples): This directory contains sample OSCAL content organized by OSCAL model. | ||
| - [fedramp.gov](fedramp.gov): This directory contains OSCAL the low, moderate, and high baselines defined by the [Federal Risk and Authorization Management Program](https://www.fedramp.gov/) (FedRAMP). | ||
| - [nist.gov/SP800-53/rev4](nist.gov/SP800-53/rev4): This directory contains OSCAL examples of the catalog, and low, moderate, and high baselines defined by NIST Special Publication (SP) [800-53 Revision 4](https://csrc.nist.gov/publications/detail/sp/800-53/rev-4/final). | ||
| - [nist.gov/SP800-53/rev5](nist.gov/SP800-53/rev5): This directory contains OSCAL examples of the catalog, and low, moderate, and high baselines defined by NIST Special Publication (SP) [800-53 Revision 5](https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final[) and [SP 800-53B](https://csrc.nist.gov/publications/detail/sp/800-53b/final) respectively. | ||
| - [nist.gov/SP800-53/rev5/draft](nist.gov/SP800-53/rev5/draft): Earlier releases of draft content for the Final Public Draft (FPD) version of the Revision 5 catalog and baselines. These drafts, are now superseded by the final versions above, and are provided for reference only. |
162 changes: 81 additions & 81 deletions
162
src/examples/component-definition/json/example-component-with-config.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,82 +1,82 @@ | ||
| { | ||
| "component-definition": { | ||
| "uuid": "1d7f1968-1240-4a4d-9863-40219d654d83", | ||
| "metadata": { | ||
| "title": "Test Component Definition", | ||
| "last-modified": "2019-08-21T15:24:24.389Z", | ||
| "version": "20200723", | ||
| "oscal-version": "1.0.0-rc1", | ||
| "parties": [{ | ||
| "uuid": "ee47836c-877c-4007-bbf3-c9d9bd805a9a", | ||
| "name": "Test Vendor", | ||
| "type": "organization" | ||
| }] | ||
| }, | ||
| "components": { | ||
| "component-1": { | ||
| "type": "software", | ||
| "title": "test component 1", | ||
| "description": "This is a software component that implements basic authentication mechanisms.", | ||
| "responsible-roles": { | ||
| "supplier": { | ||
| "party-uuids": [ "ee47836c-877c-4007-bbf3-c9d9bd805a9a" ] | ||
| } | ||
| }, | ||
| "control-implementations": [{ | ||
| "uuid": "cfcdd674-8595-4f98-a9d1-3ac70825c49f", | ||
| "source": "../../../content/nist.gov/SP800-53/rev4/json/NIST_SP-800-53_rev4_catalog.json", | ||
| "description": "This is a partial implementation of the SP 800-53 rev4 catalog, focusing on the control enhancement AC-2 (2).", | ||
| "implemented-requirements": [{ | ||
| "uuid": "d1016df0-9b5c-4839-86cd-f9c1d113077b", | ||
| "description": "Inactive accounts are automatically disabled based on the duration specified by the duration parameter. Disabled accounts are expected to be reviewed and removed when appropriate.", | ||
| "control-id": "ac-2.2", | ||
| "using": { | ||
| "implementations": { | ||
| "configuration-id": "af5b16c7-7a03-4c78-92a3-47dfdbfb3868", | ||
| "with-arguments": { | ||
| "duration": { | ||
| "use-param": "ac-2.2_prm_2" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| }] | ||
| }, | ||
| { | ||
| "uuid": "22dbff65-9729-449f-9dfc-4e5fee0906de", | ||
| "source": "../../../content/fedramp.gov/json/FedRAMP_HIGH-baseline_profile.json", | ||
| "description": "This is a partial implementation of the FedRAMP High profile, focusing on the control enhancement AC-2 (2).", | ||
| "implemented-requirements": [ | ||
| { "uuid": "65e30b37-0640-4844-9f42-b2a7ae944bb1", | ||
| "control-id": "ac-2.2", | ||
| "description": "This is a summary of the control implementation." | ||
| } | ||
| ] | ||
| } | ||
| ], | ||
| "configurations": { | ||
| "af5b16c7-7a03-4c78-92a3-47dfdbfb3868": { | ||
| "description": "", | ||
| "arguments": { | ||
| "duration": {"type": "duration-seconds"} | ||
| }, | ||
| "mechanisms": { | ||
| "configuration-method": { | ||
| "script": { | ||
| "STRVALUE": "something {{ duration }} ", | ||
| "system": "https://www.perl.org/" | ||
| } | ||
| }, | ||
| "verification-method": { | ||
| "script": { | ||
| "STRVALUE": "something {{ duration }} ", | ||
| "system": "https://www.perl.org/" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| { | ||
| "component-definition": { | ||
| "uuid": "1d7f1968-1240-4a4d-9863-40219d654d83", | ||
| "metadata": { | ||
| "title": "Test Component Definition", | ||
| "last-modified": "2019-08-21T15:24:24.389Z", | ||
| "version": "20200723", | ||
| "oscal-version": "1.0.0-rc1", | ||
| "parties": [{ | ||
| "uuid": "ee47836c-877c-4007-bbf3-c9d9bd805a9a", | ||
| "name": "Test Vendor", | ||
| "type": "organization" | ||
| }] | ||
| }, | ||
| "components": { | ||
| "component-1": { | ||
| "type": "software", | ||
| "title": "test component 1", | ||
| "description": "This is a software component that implements basic authentication mechanisms.", | ||
| "responsible-roles": { | ||
| "supplier": { | ||
| "party-uuids": [ "ee47836c-877c-4007-bbf3-c9d9bd805a9a" ] | ||
| } | ||
| }, | ||
| "control-implementations": [{ | ||
| "uuid": "cfcdd674-8595-4f98-a9d1-3ac70825c49f", | ||
| "source": "../../../content/nist.gov/SP800-53/rev4/json/NIST_SP-800-53_rev4_catalog.json", | ||
| "description": "This is a partial implementation of the SP 800-53 rev4 catalog, focusing on the control enhancement AC-2 (2).", | ||
| "implemented-requirements": [{ | ||
| "uuid": "d1016df0-9b5c-4839-86cd-f9c1d113077b", | ||
| "description": "Inactive accounts are automatically disabled based on the duration specified by the duration parameter. Disabled accounts are expected to be reviewed and removed when appropriate.", | ||
| "control-id": "ac-2.2", | ||
| "using": { | ||
| "implementations": { | ||
| "configuration-id": "af5b16c7-7a03-4c78-92a3-47dfdbfb3868", | ||
| "with-arguments": { | ||
| "duration": { | ||
| "use-param": "ac-2.2_prm_2" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| }] | ||
| }, | ||
| { | ||
| "uuid": "22dbff65-9729-449f-9dfc-4e5fee0906de", | ||
| "source": "../../../content/fedramp.gov/json/FedRAMP_HIGH-baseline_profile.json", | ||
| "description": "This is a partial implementation of the FedRAMP High profile, focusing on the control enhancement AC-2 (2).", | ||
| "implemented-requirements": [ | ||
| { "uuid": "65e30b37-0640-4844-9f42-b2a7ae944bb1", | ||
| "control-id": "ac-2.2", | ||
| "description": "This is a summary of the control implementation." | ||
| } | ||
| ] | ||
| } | ||
| ], | ||
| "configurations": { | ||
| "af5b16c7-7a03-4c78-92a3-47dfdbfb3868": { | ||
| "description": "", | ||
| "arguments": { | ||
| "duration": {"type": "duration-seconds"} | ||
| }, | ||
| "mechanisms": { | ||
| "configuration-method": { | ||
| "script": { | ||
| "STRVALUE": "something {{ duration }} ", | ||
| "system": "https://www.perl.org/" | ||
| } | ||
| }, | ||
| "verification-method": { | ||
| "script": { | ||
| "STRVALUE": "something {{ duration }} ", | ||
| "system": "https://www.perl.org/" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } |
Oops, something went wrong.