forked from ChelseaKR/oscal-validate
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathsurvey-urls.txt
More file actions
87 lines (87 loc) · 13.4 KB
/
Copy pathsurvey-urls.txt
File metadata and controls
87 lines (87 loc) · 13.4 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
# Targets for docs/findings/. One line per document:
# group<TAB>url<TAB>comma-separated URLs to hand this target with --resolve
#
# The sample is purposive, not random. It is every OSCAL JSON instance NIST
# publishes as an example, NIST's own control catalogs and baselines, the
# FedRAMP baselines and templates as they survive today, and a spread of
# third-party publishers. See docs/findings/ for what that supports and what it
# does not.
#
# The third column is the target's effective data model: the documents it
# imports, directly or transitively. Those URLs are fetched on the same terms as
# a target and are NOT surveyed, so a document that appears only there is never
# counted in the denominator. Fifteen appear here; ten of them are also targets
# in their own right and five are not. Every entry was derived from an
# IMPORT_NOT_SUPPLIED finding in the 2026-08-14 run and walked to a fixed point;
# the three cases where matching a file name to a published copy is a judgement
# rather than an identity are named under "Method" in
# docs/findings/2026-08-15-imports-supplied-survey.md.
#
# Fifteen targets are deliberately left incomplete because nothing public can
# complete them: nine import a profile whose only rlink is a release ZIP, five
# import a relative path that does not exist in the repository that publishes
# them, and one imports a back-matter UUID it never declares. Those are findings,
# not omissions, and they are written up under Finding 3.
#
# -- NIST, usnistgov/oscal-content (public domain / CC0) --------------------
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/catalog/json/basic-catalog.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/catalog/json/basic_catalog.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/profile/json/basic-profile.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/catalog/json/basic-catalog.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/profile/json/basic_profile.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/catalog/json/basic_catalog.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/profile/json/basic-profile-resolved.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/profile/json/basic-resolved-profile_catalog.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/ssp/json/ssp-example.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/ssp/json/ifa_ssp-example.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/ssp/json/ifa_ssp.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/ssp/json/oscal_leveraged-example_ssp.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/ssp/json/oscal_leveraging-example_ssp.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/component-definition/json/example-component-definition.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_MODERATE-baseline_profile.json,https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/component-definition/json/example-component.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev4/json/NIST_SP-800-53_rev4_catalog.json,https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-automation/master/dist/content/rev4/baselines/json/FedRAMP_rev4_HIGH-baseline_profile.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/ap/json/ifa_assessment-plan.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/ssp/json/ifa_ssp.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/ap/json/ifa_assessment-plan-example.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/ar/json/ifa_assessment-results.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/ap/json/ifa_assessment-plan.json,https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/ssp/json/ifa_ssp.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/ar/json/ifa_assessment-results-example.json
nist-example https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/poam/json/ifa_plan-of-action-and-milestones.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/ssp/json/ifa_ssp.json
nist-catalog https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json
nist-catalog https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev4/json/NIST_SP-800-53_rev4_catalog.json
nist-catalog https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/CSF/v2.0/json/NIST_CSF_v2.0_catalog.json
nist-catalog https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-171/rev3/json/NIST_SP800-171_rev3_catalog.json
nist-catalog https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-172/rev3/json/NIST_SP800-172_rev3_catalog.json
nist-catalog https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-218/ver1/json/NIST_SP800-218_ver1_catalog.json
nist-baseline https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_LOW-baseline_profile.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json
nist-baseline https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_MODERATE-baseline_profile.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json
nist-baseline https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_HIGH-baseline_profile.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json
nist-baseline https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_PRIVACY-baseline_profile.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json
nist-baseline https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_LOW-baseline-resolved-profile_catalog.json
nist-baseline https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev4/json/NIST_SP-800-53_rev4_MODERATE-baseline_profile.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev4/json/NIST_SP-800-53_rev4_catalog.json
#
# -- FedRAMP, OSCAL-Foundation/fedramp-automation ---------------------------
# GSA/fedramp-automation, the original home of these files, was archived in
# July 2025 and has since been removed from GitHub; automate.fedramp.gov no
# longer resolves. This fork carries the GSA commit history and is the reachable
# copy as of 2026-08-14. No license file is stated in the fork; only metadata
# and findings are recorded here, never content.
fedramp https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-automation/master/dist/content/rev5/baselines/json/FedRAMP_rev5_HIGH-baseline_profile.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json
fedramp https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-automation/master/dist/content/rev5/baselines/json/FedRAMP_rev5_MODERATE-baseline_profile.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json
fedramp https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-automation/master/dist/content/rev5/templates/ssp/json/FedRAMP-SSP-OSCAL-Template.json https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-automation/master/dist/content/rev5/baselines/json/FedRAMP_rev5_MODERATE-baseline-resolved-profile_catalog.json
fedramp https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-automation/master/dist/content/rev5/templates/sap/json/FedRAMP-SAP-OSCAL-Template.json https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-automation/master/dist/content/rev5/templates/ssp/json/FedRAMP-SSP-OSCAL-Template.json,https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-automation/master/dist/content/rev5/baselines/json/FedRAMP_rev5_MODERATE-baseline-resolved-profile_catalog.json
fedramp https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-automation/master/dist/content/rev5/templates/sar/json/FedRAMP-SAR-OSCAL-Template.json https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-automation/master/dist/content/rev5/templates/sap/json/FedRAMP-SAP-OSCAL-Template.json,https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-automation/master/dist/content/rev5/templates/ssp/json/FedRAMP-SSP-OSCAL-Template.json,https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-automation/master/dist/content/rev5/baselines/json/FedRAMP_rev5_MODERATE-baseline-resolved-profile_catalog.json
fedramp https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-automation/master/dist/content/rev5/templates/poam/json/FedRAMP-POAM-OSCAL-Template.json https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-automation/master/dist/content/rev5/templates/ssp/json/FedRAMP-SSP-OSCAL-Template.json,https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-automation/master/dist/content/rev5/baselines/json/FedRAMP_rev5_MODERATE-baseline-resolved-profile_catalog.json
fedramp https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-resources/main/baselines/rev5/json/FedRAMP_rev5_LI-SaaS-baseline_profile.json https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-resources/main/baselines/rev5/json/FedRAMP_rev5_LOW-baseline_profile.json,https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-resources/main/baselines/rev5/json/FedRAMP_rev5_catalog_tailoring_profile.json,https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json
fedramp https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-resources/main/baselines/rev5/json/FedRAMP_rev5_LOW-baseline_profile.json https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-resources/main/baselines/rev5/json/FedRAMP_rev5_catalog_tailoring_profile.json,https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json
fedramp https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-resources/main/examples/ssp/json/fedramp-ssp-example_NORMALIZED_.oscal.json https://raw.githubusercontent.com/OSCAL-Foundation/fedramp-resources/main/baselines/rev5/json/FedRAMP_rev5_HIGH-baseline-resolved-profile_catalog.json
#
# -- Third-party publishers -------------------------------------------------
vendor https://raw.githubusercontent.com/awslabs/oscal-content-for-aws-services/main/component-definitions/s3.oscal.json https://raw.githubusercontent.com/awslabs/oscal-content-for-aws-services/main/catalogs/aws_security-hub.oscal.json
vendor https://raw.githubusercontent.com/awslabs/oscal-content-for-aws-services/main/component-definitions/ec2.oscal.json https://raw.githubusercontent.com/awslabs/oscal-content-for-aws-services/main/catalogs/aws_security-hub.oscal.json
vendor https://raw.githubusercontent.com/EasyDynamics/oscal-viewer/main/samples/catalog-basic.json
vendor https://raw.githubusercontent.com/EasyDynamics/oscal-viewer/main/samples/profile-basic.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/catalog/json/basic-catalog.json
vendor https://raw.githubusercontent.com/EasyDynamics/oscal-viewer/main/samples/ssp-example.json
vendor https://raw.githubusercontent.com/EasyDynamics/oscal-viewer/main/samples/component-definition-example.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_MODERATE-baseline_profile.json,https://raw.githubusercontent.com/usnistgov/oscal-content/main/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json
vendor https://raw.githubusercontent.com/EasyDynamics/oscal-viewer/main/samples/assessment-plan-ifa.json
vendor https://raw.githubusercontent.com/EasyDynamics/oscal-viewer/main/samples/assessment-results-ifa.json
vendor https://raw.githubusercontent.com/EasyDynamics/oscal-viewer/main/samples/poam-ifa.json https://raw.githubusercontent.com/usnistgov/oscal-content/main/examples/ssp/json/ifa_ssp.json
vendor https://raw.githubusercontent.com/ComplianceAsCode/oscal-content/main/catalogs/hipaa/catalog.json
vendor https://raw.githubusercontent.com/IBM/oscal-exchange-protocol/main/trestle.workspace/component-definitions/sample/component-definition.json
vendor https://raw.githubusercontent.com/IBM/oscal-exchange-protocol/main/trestle.workspace/system-security-plans/sample/system-security-plan.json
vendor https://raw.githubusercontent.com/IBM/oscal-exchange-protocol/main/trestle.workspace/plan-of-action-and-milestones/sample/plan-of-action-and-milestones.json