software-factory-oscal An example of how to use OSCAL to define controls for a software factory CI/CD pipeline