Project rename

[funnelfiasco]

Feedback from #ossf/tac#479 includes a desire to rename this project in order to not conflict with the Supply Chain Integrity WG.

Setting aside my "we initialize too many things that don't really need to be initialisms/acronyms" position, I'm opening an issue to come up with a new name.

Here are a few I've thought of. They're in a randomized order with no explanation in order to keep my thumb off the proverbial scales. Some of these are Not Good.

• CompCats
• Bean Dip
• Compliance Cats
• Complyify
• Simple CoIn
• Simplified Compliance Infrastructure (never abbreviated "SCI")

[trumant]

Some tongue in cheek ideas:

• NOSCAL - Not OSCAL
• FOSSCAL
• ComplYAML - because who doesn't love YAML?

Some more serious ideas:

• cumplimiento - compliance in Spanish
• comal - we apply heat to help finish the dish

[jflowers]

Playing off of ORBIT I vote for Lagrange

Lagrange points are five specific locations in space where the gravitational forces of two large orbiting bodies balance out, allowing a smaller object to stay relatively stationary in space with minimal energy expenditure. These points are named after Italian astronomer and mathematician Joseph-Louis Lagrange.

[trumant]

How about "Mole" - a many layered, rich and highly complex sauce

[trumant]

Or "Integrous" because it hints at integration, but is about having integrity.

[jflowers]

Is this a repo name under an existing organization or are we talking about an organization name? Wonder how much consideration we need to put into name collision.

…

------------------------------ Jay Flowers

On Mon, Apr 28, 2025, 3:07 PM Travis Truman ***@***.***> wrote: *trumant* left a comment (ossf/gemara#50) <#50 (comment)> Or "Integrous <https://en.wiktionary.org/wiki/integrous#Adjective>" because it hints at integration, but is about having integrity. — Reply to this email directly, view it on GitHub <#50 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AABUIRGADTHAQPDSHH6V7I323Z357AVCNFSM6AAAAAB4AOM44WVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDQMZWGIZTKMBSGU> . You are receiving this because you commented.Message ID: ***@***.***>

[eddie-knight]

@jflowers Currently this project is contained to a single repository, so the project could live within github.com/ossf upon acceptance.

But if we want to discuss splitting the specification/schemas and various go modules into isolated repos... at that point we'd need to think about the availability of the name on github.com/*

[jflowers]

@jflowers Currently this project is contained to a single repository, so the project could live within github.com/ossf upon acceptance.

But if we want to discuss splitting the specification/schemas and various go modules into isolated repos... at that point we'd need to think about the availability of the name on github.com/*

That's easier for a name, that's good 😊

[trumant]

A few other names that were tossed around in conversation recently:

• CompSCI - compassionate simplified compliance infrastructure
• CompSI - compliance simplified

[jflowers]

Makes me think CompyStruct - compliance structure

…

------------------------------ Jay Flowers

On Tue, May 6, 2025, 10:56 AM Travis Truman ***@***.***> wrote: *trumant* left a comment (ossf/gemara#50) <#50 (comment)> A few other names that were tossed around in conversation recently: - CompSCI - compassionate simplified compliance infrastructure - CompSI - compliance simplified — Reply to this email directly, view it on GitHub <#50 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AABUIRGAMND4JLYC3TWS4HL25DEQ3AVCNFSM6AAAAAB4AOM44WVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDQNJUHA4DANBUGI> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[jpower432]

👋 Adding a few more name ideas discussed:

• GRC Engineering Model (GEM)
• Simplified Security and Compliance Language (SSCL)
• Simplified Compliance Langauge (SCL)

[xee5ch]

What is the primary goal of the data models: governance, compliance, some form of "security" operations data? All of the above? I'll revisit the site and docs, but should that influence the name?

If not, I am sure I can think of clever names to get feedback if the primary goal isn't important in the name. I don't dislike @jpower432's proposals.

[evankanderson]

Discussion at the WG-ORBIT meeting suggested that while three-letter acronyms are currently popular in this space, a name which was not necessarily directly meaningful but which was distinct and easily searched might be more helpful. (e.g. GEM collides with a Ruby concept)

I warned that names of > 3 syllables are likely to get acronymed if possible, so a shorter name would be appreciated by everyone who refers to the project.

Some example suggestions from the meeting to get the ball rolling:

• Gherkin (though this is also the name of a test framework)
• Waffles (though Emily Fox uses this for her examples)
• Sausage

[evankanderson]

Other proposals:

• Press (used to stamp out metal)
• Servo (motor used in control systems)
• Etna (town in New Hampshire)