Skip to content

Issues: GSA/fedramp-automation

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

166 Open 325 Closed
166 Open 325 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Possible Bug in the Constraint: non-provider-responsible-role-references-user bug Something isn't working
#999 opened Dec 14, 2024 by JoseGHdz
3 of 12 tasks
Remove obsolete has-separation-of-duties-matrix enhancement New feature or request scope: constraints type: task
#986 opened Dec 10, 2024 by aj-stein-gsa
2 of 10 tasks
Digital Authorization Phase 1
1
@Gabeblis
Documentation Automation [SPIKE] enhancement New feature or request scope: documentation type: spike
#984 opened Dec 10, 2024 by brian-ruf
7 tasks
Check for optional last accessed date for referenced resources enhancement New feature or request model: catalog model: poam model: profile model: sap model: sar model: ssp type: task
#980 opened Dec 9, 2024 by aj-stein-gsa
14 tasks
@kyhu65867
Update FedRAMP baselines to upstream NIST SP 800-53 OSCAL 1.3.0 catalog model: catalog model: profile scope: baselines type: backlog item For developer work that is not part of a user-facing epic or user story.
#976 opened Dec 9, 2024 by aj-stein-gsa
4 of 10 tasks
1
@Gabeblis
Add constraint to validate component "used-by" link constraint: completeness enhancement New feature or request model: ssp scope: constraints type: task
#964 opened Dec 4, 2024 by Rene2mt
14 tasks done
Digital Authorization Phase 1
1
@Gabeblis
Add constraint requiring "used-by" links for components with protocol assemblies constraint: completeness enhancement New feature or request model: ssp scope: constraints type: task
#963 opened Dec 4, 2024 by Rene2mt
14 tasks done
Digital Authorization Phase 1
1
@Gabeblis
Add constraint requiring protocol for certain components constraint: completeness enhancement New feature or request model: ssp scope: constraints type: task
#962 opened Dec 4, 2024 by Rene2mt
14 tasks
Digital Authorization Phase 1
Connection Security Allowed Values enhancement New feature or request model: ssp scope: constraints type: task
#961 opened Dec 4, 2024 by brian-ruf
14 tasks
7
Deprecate ssp-all-VALID.xml SSP for integration testing, replace with example SSP devops scope: constraints type: backlog item For developer work that is not part of a user-facing epic or user story.
#958 opened Dec 4, 2024 by aj-stein-gsa
2 of 4 tasks
Digital Authorization Phase 1
1
@wandmagic
Identify Expected Attachments in Baselines enhancement New feature or request
#957 opened Dec 4, 2024 by brian-ruf
1 of 7 tasks
Check information type categorization CIA impacts have a selected field bug Something isn't working constraint: completeness model: ssp scope: constraints type: task
#955 opened Dec 4, 2024 by aj-stein-gsa
14 tasks
Digital Authorization Phase 1
1
@Gabeblis
5
Information Types for Leveraged Authorizations and External, Interconnected, and Unauthorized Systems constraint: completeness enhancement New feature or request model: ssp scope: constraints type: task
#942 opened Nov 26, 2024 by brian-ruf
14 tasks done
Digital Authorization Phase 1
1
@Gabeblis
6
Constraint error while processing expression: Diagrams bug Something isn't working model: ssp scope: constraints type: task
#940 opened Nov 26, 2024 by brian-ruf
1 of 12 tasks
2
@Gabeblis
5
by-component constraint enforced in wrong location bug Something isn't working model: ssp scope: constraints type: task
#939 opened Nov 26, 2024 by brian-ruf
1 task done
1
@aj-stein-gsa
1
Provider Constraint for Leveraged Authorizations and External, Interconnected, and Unauthorized Systems enhancement New feature or request model: ssp scope: constraints type: task
#937 opened Nov 25, 2024 by brian-ruf
9 of 14 tasks
1
@Gabeblis
2
Risks/Mitigations/Impacts in Table 7.1 External Systems/Services, interconnections, APIs, and CLIs without FedRAMP Auth [RESEARCH] enhancement New feature or request type: spike
#935 opened Nov 25, 2024 by brian-ruf
2
Each Interconnection, Service, or Software Connecting to an External Systems Must be Linked to a POA&M Entry enhancement New feature or request model: ssp scope: constraints type: task
#934 opened Nov 23, 2024 by aj-stein-gsa
14 tasks
Digital Authorization Phase 1
@wandmagic
4
Each networked component must document its authentication method with remarks enhancement New feature or request model: ssp scope: constraints type: task
#933 opened Nov 23, 2024 by aj-stein-gsa
10 of 14 tasks
Digital Authorization Phase 1
1
@Gabeblis
Components representing inter-boundary communication need to declare the direction of data flow enhancement New feature or request model: ssp scope: constraints type: task
#930 opened Nov 22, 2024 by aj-stein-gsa
14 tasks
Digital Authorization Phase 1
2
@DimitriZhurkin
6
Check that interconnected services' components in a SSP have an implementation points enhancement New feature or request model: ssp scope: constraints type: task
#928 opened Nov 22, 2024 by aj-stein-gsa
14 tasks
Digital Authorization Phase 1
1
@wandmagic
Authentication Method Constraint for Leveraged Authorizations and External, Interconnected, and Unauthorized Systems enhancement New feature or request model: ssp scope: constraints type: task
#924 opened Nov 21, 2024 by brian-ruf
14 tasks done
Digital Authorization Phase 1
1
@Gabeblis
2
Current OSCAL model documentation approaches are suboptimal risk: accept scope: constraints scope: documentation type: risk An item for the risk register.
#923 opened Nov 21, 2024 by aj-stein-gsa
@aj-stein-gsa
NIST and FedRAMP, and others do not have a shared understanding core OSCAL, RMF, and FedRAMP constraints risk: accept scope: constraints type: risk An item for the risk register.
#922 opened Nov 21, 2024 by aj-stein-gsa
@aj-stein-gsa
[Feedback]: Referencing UUIDs from upstream models
#914 opened Nov 19, 2024 by Telos-sa
1 of 12 tasks
@aj-stein-gsa
3
ProTip! no:milestone will show everything without a milestone.