Merge pull request #47 from jpower432/chore/remove-vendor

chore: remove the vendor directory and references to it

.github/workflows/create-new.yml

@@ -39,7 +39,7 @@ jobs:
         with:
           python-version: 3.8
       - name: Install Trestlebot
-        run: make trestlebot-install
+        run: python3 -m pip install --upgrade pip setuptools && python3 -m pip install -r requirements.txt
       - name: Create new profile with imports
         run: |
           python3 scripts/set_default_profile.py --import_path "${IMPORT_TYPE}s/${IMPORT_NAME}/${IMPORT_TYPE}.json" \

.github/workflows/update-upstream.yml

@@ -5,6 +5,8 @@ on: workflow_dispatch
 env:
   FEDRAMP_PROFILE_NAME: "fedramp_rev5_high"
   NIST_CATALOG_NAME: "nist_rev5_800_53"
+  FEDRAMP_REPO_REF: "master"
+  NIST_REPO_REF: "690f517daaf3a6cbb4056d3cde6eae2756765620"
 
 jobs:
   update:
@@ -28,18 +30,18 @@ jobs:
         with:
           python-version: 3.8
       - name: Install Trestle
-        run: make trestle-install
+        run: python3 -m pip install --upgrade pip setuptools && python3 -m pip install -r requirements.txt
       - name: Update catalogs
         run: |
           rm -rf "catalogs/${NIST_CATALOG_NAME}"
-          trestle import -f https://raw.githubusercontent.com/usnistgov/oscal-content/master/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json -o "${NIST_CATALOG_NAME}"
+          trestle import -f "https://raw.githubusercontent.com/usnistgov/oscal-content/${NIST_REPO_REF}/nist.gov/SP800-53/rev5/json/NIST_SP-800-53_rev5_catalog.json" -o "${NIST_CATALOG_NAME}"
       - name: Update profiles
         run: |
           rm -rf "profiles/${FEDRAMP_PROFILE_NAME}"
-          trestle import -f https://raw.githubusercontent.com/GSA/fedramp-automation/master/dist/content/rev5/baselines/json/FedRAMP_rev5_HIGH-baseline_profile.json -o "${FEDRAMP_PROFILE_NAME}"
+          trestle import -f "https://raw.githubusercontent.com/GSA/fedramp-automation/${FEDRAMP_REPO_REF}/dist/content/rev5/baselines/json/FedRAMP_rev5_HIGH-baseline_profile.json" -o "${FEDRAMP_PROFILE_NAME}"
           trestle href --name "${FEDRAMP_PROFILE_NAME}" -hr "trestle://catalogs/${NIST_CATALOG_NAME}/catalog.json"
       - name: Update content
-        uses: RedHatProductSecurity/trestle-bot/actions/autosync@v0.3.0
+        uses: RedHatProductSecurity/trestle-bot/actions/autosync@v0.4.2
         with:
           markdown_path: "markdown/profiles"
           oscal_model: "profile"

.mega-linter.yml

@@ -7,6 +7,4 @@ ENABLE_LINTERS:
 DISABLE_ERRORS_LINTERS:
   - MAKEFILE_CHECKMAKE
   - REPOSITORY_KICS
-  - BASH_SHELLCHECK
-
-FILTER_REGEX_EXCLUDE: (vendor/)
+  - BASH_SHELLCHECK

README.md

@@ -12,7 +12,7 @@ Some the directories in this repository are managed through automated processes
 
 - catalogs: This stores OSCAL Catalogs installed in the trestle workspace.
 - profiles (FedRAMP only) - This stores OSCAL Profiles installed in the trestle workspace.
-- vendor - This stores automation managed in a central repository that is vendored in.
+
 
 For information on how this data is managed, see the [FAQs](./docs/faqs.md).
 

docs/faqs.md

@@ -6,8 +6,4 @@ A: This is managed through GitHub Actions. The workflow file is located [here](.
 
 Q: How do I update FedRAMP profiles in this workspace?
 
-A: This is managed through GitHub Actions. The workflow file is located [here](../.github/workflows/update-fedramp.yml). It can be run [manually](https://docs.github.com/en/actions/managing-workflow-runs/manually-running-a-workflow).
-
-Q: How do I update the vendor directory?
-
-A: The vendor directory is managed as a git subtree. To pull the latest commit from main on the [`oscal-automation-libs`](https://github.com/RedHatProductSecurity/oscal-automation-libs.git) repository, run `make update-subtree`.
+A: This is managed through GitHub Actions. The workflow file is located [here](../.github/workflows/update-fedramp.yml). It can be run [manually](https://docs.github.com/en/actions/managing-workflow-runs/manually-running-a-workflow).