github.com/gemaraproj/gemara@v0.23.0

docs/adrs/0003-go-sdk-layer-2.md raw

 1---
 2layout: page
 3title: Create Go SDK to Support "Layer 2" Authors and Consumers
 4---
 5
 6- **ADR:** 0003
 7- **Proposal Author(s):** @eddie-knight
 8- **Status:** Accepted
 9
10## Context
11
12As noted in ADR-0002, much automation work has been done by the _FINOS Common Cloud Controls (CCC)_ and _Open Source Project Security Baseline (OSPSB)_ communities to automate document handling and OSCAL generation. These two projects, and potentially others in the future, will greatly benefit from a central SDK that supports common activities.
13
14## Action
15
16Take the best elements from each project's CI tooling and bring them together into a single SDK. Support those two projects as they migrate their existing tooling to the new SDK. This will be a Go module with a package dedicated to Layer 2 documents. It should be extensible in a way that allows additional packages for other documents in the future.
17
18## Consequences
19
20Positive: Standardized tooling for "Layer 2" compatible documents
21Negative: Significantly increased maintenance requirements for the project
22
23## Alternatives Considered
24
25None