Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Generator/Validator to map common features, threats and control #464

Open
smendis-scottlogic opened this issue Oct 11, 2024 · 1 comment
Assignees
Labels

Comments

@smendis-scottlogic
Copy link
Contributor

Feature Request

Description of Problem:

When we create controls, threats and features for a given service (Eg: ObjectStorage), we define common_controls, common_threats and common_features in controls.ymal, threats.yaml and features.yaml under object-storage. For all threats referred by the common_controls in controls.yaml, there should be a mapping in common_threats in threats.yaml. For all features referred by the common_threats in threats.yaml, there should be a mapping in common_features in features.yaml. When doing this manually we may miss to add there ids.

Potential Solutions:

Write a generator to generate common threats and controls when you are given the common_features for the given service.
Extend this as a validator to validate this mapping is correct when all 3 files exist for a given service.

Copy link

This issue will be closed as stale in 7 days. Please update this issue if it is still needed.

@github-actions github-actions bot added the stale label Nov 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

2 participants