Proposal for accepting changes into the OVAL Schema

[A-Biggs]

I'd like to see the momentum of changes being made to OVAL continue, and am therefore proposing a new approach for accepting changes into the official OVAL schema going forward (just throwing something out there to start a conversation, so by no means it needs to be what I'm suggesting below).

Bug fixes to existing schemas:

• Creation of a PR with the changes and the PR approved by one or more OVAL Board members, and then merged

New schema or modifying existing schemas:

• Creation of PR with the changes, including test content and the PR approved by one or more OVAL Board members
• Schema is implemented by at least one engine
• Changes are reviewed/discussed at an OVAL boarding meeting, and decision is made to accept, reject, or request modifications. If accepted, PR will then be merged.

Release cycles?

• Quarterly? Yearly? Whenever a change is made? Arbitrary at Board's discretion?

[vanderpol]

Thanks @A-Biggs we can discuss in detail today at the OVAL board meeting, but on first glance it looks good. For the Release Cycle, I think arbitrary at board's decision is what we likely need.

[solind]

Release cycles arbitrarily at the discretion of the Board is what I believe makes the most sense.

[vanderpol]

Per today's OVAL board meeting, the board has approved @A-Biggs proposal.