-
Notifications
You must be signed in to change notification settings - Fork 74
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Template FedRAMP-SSP-OSCAL-Template.json does not validate with OSCAL CLI #573
Comments
Are you using this version of the OSCAL SSP template? Also, can you confirm which version of the OSCAL-CLI you are using? |
For the version of the OSCAL CLI, I was using 1.0.3. As for the template, the one you linked is the one that gave me errors. |
Please also note, neither of the JSON or XML templates are valid, and also, that AC-1 has errors in the template. There is no AC-1.b.1 and AC-1.b.2, there is AC-1.b and AC-1.c |
I am aware of the issues. I posted on Gitter a while back about the issues and I was notified that a different version of the template would be in the works in the next couple of months due to errors in the template. Do you have any examples of valid OSCAL SSP's that I might be able to use? |
@JoseGHdz - my note was more of a reminder. I do not represent FedRAMP team - I represent NIST OSCAL team but we all want to support FedRAMP team that works very hard to cover all those gaps. The examples we (NIST) have in the oscal-content repo are not based on this FedRAMP template, but I am working on a sample that started with the FedRAMP template and got a little simplified to get faster to a valid structure. One thing I did that might not help you, was to remove the long list of controls because we are focusing on a shorter list. Please feel free to email directly at oscal@nist.gov and I can share what I have now and the progress we make. |
This relates to ...
What happened?
I setup the OSCAL CLI environment and wanted to test the environment with multiple files. The
FedRAMP-SSP-OSCAL-Template.json file did not pass the tests.
Relevant log output
How do we replicate this issue?
Where, exactly?
Too many validation errors to point at the exact lines.
Other relevant details
No response
The text was updated successfully, but these errors were encountered: