At this point of time, this repository contains OSCAL formatted SSPs (System Security Plans) generated automatically out of opencontrol data.

This repository is on periodical refresh.

Developer information.

gocomply_fedramp tool was used to generate files available here.

Commands to install gocomply_fedramp tool:

$ get -u -v github.com/gocomply/fedramp/cli/gocomply_fedramp

Command to re-generate OSCAL files:

$ gocomply_fedramp opencontrol https://github.com/ComplianceAsCode/redhat xml/

How to use these files?

It is possible to generate latest FedRAMP SSP document in .docx form using gocomply_fedramp tool.

$ gocomply_fedramp convert ./xml/coreos-4-fedramp-Low.xml  FedRAMP-Low-openshift.docx

To generate all FedRAMP docx guides, one for each oscal file available run: