opencontrol / cf-compliance Goto Github PK

While the project title, description, and Readme all imply that this project applies to Cloud Foundry broadly, half of its components make explicit reference to the Cloud.gov-specific instance of Cloud Foundry. Some of these references aren't even applicable to plain, open source Cloud Foundry, e.g. UAA satisfies standard NIST-800-53, control key AC-7:

  - text: "#### a  \nCloud.gov displays banner on the cloud.gov login page\n  \n####
      b  \nThe banner displays on the login page until the user is logged in\n  \n####
      c  \nThe banner displays all requirements"

If product management agrees, I'll be happy to work up a pull request that replaces all cloud.gov references, to the best of my ability:

• replacing them with "Cloud Foundry" where the narrative has an OSS equivalent
• removing ones that are narratives exclusive to cloud.gov

I expect there to be some back-and-forth, as I'm completely unfamiliar with Cloud.gov.

Thanks!