SCAP v2 Repo Metadata WG: Call on Thursday!

[David Ries]

Hello All,

We have a call this Thursday! 

In advance of the call, please take 15 minutes to:

• Read the working Group overview, membership, milestones (a few, short paragraphs!)
• Review the examples documentation (just a page of bullets!)
• Read the proposed agenda (below) and let me know if you have any changes/additions!

Proposed agenda for the call:

1. Solicit feedback on the WG objectives, membership, and initial process
2. Solicit feedback on the Examples documentation
3. Discuss scope implied by examples. Should we limit scope to OVAL/SCAP content consumed by automation? Or, should we include additional formats and user-oriented use cases? Should we make that decision now or should we wait?
4. Discuss next steps and goals for the September F2F.
5. Open discussion.

If you have any questions, concerns, ideas or other feedback on the WG or for the call, please let us know!

Best,

David

David E. Ries
Co-Founder, Business Development
ri...@jovalcm.com

[Banghart, Stephen A. (Fed)]

To follow up on this,

 

If you would like an invite to this telecon, please send me an email and I’ll get you the Skype logistics.

 

Thanks,

Stephen

--
To unsubscribe from this group, send email to scap-dev-conte...@list.nist.gov
Visit this group at https://list.nist.gov/scap-dev-content

[David Ries]

Hello All,

As a follow-up to our call today, I have updated the GitHub repository:

• Added a description of our new “Phased" approach
• Updated the Examples page, breaking it down into Phase I and Phase II examples
• Added a new Metadata Requirements for Phase I page

If you were unable to attend the call, please take a quick look at the Phases we have defined and provide any feedback you have. 

In brief, we decided to limit our Phase I scope to the automated consumption of OVAL and OVAL/XCCDF content. In Phase II we will broaden our scope to include other formats and use cases (e.g. SWID repos, CVE feeds, etc.).

-David