We are excited that you want to contribute to the OSCAL project. We are striving to provide a collaborative environment for professionals to contribute to the project's goals and objectives. A primary focus of this project is to improve security assessment efficiency, accuracy, and consistency on the basis of real-world experience with the technology used in this space. The language we develop must be well-defined, with easy to use formats.
We use GitHub as a collaboration platform for the development of the OSCAL models. Within the OSCAL GitHub repository you will find:
- A set of issues for which we need your help. Feel free to pick from this list, or reach out to us about any other ideas you might have.
- Guidelines on contributing to this project.
- A project board that shows the issues the team is currently working on.
The NIST OSCAL team hosts meetings with the OSCAL community on different topics.
- Lunch with the OSCAL Developers: A bi-weekly meeting hosted by the NIST OSCAL development team to share information about current development efforts, discuss issues, collect feedback on priorities, and to answer development-related questions.
- OSCAL Model Review: A bi-weekly meeting hosted by the NIST OSCAL development team to update adopters on the latest improvements to the OSCAL models, and for community members to provide high-bandwidth feedback on concerns, gaps, and other issues with the OSCAL models.
We encourage you to attend these meetings.
All users, but especially tool developers, should consider reaching out and connecting with others using your technology stack or platform. See our tools page for more information.
If you are interested in contributing, please feel free to contact us!