ComplianceAsCode / auditree-arboretumLinks
The Auditree common fetchers, checks and harvest reports library.
☆20Updated 2 years ago
Alternatives and similar repositories for auditree-arboretum
Users that are interested in auditree-arboretum are comparing it to the libraries listed below
Sorting:
- The Auditree framework tool to run compliance control checks as unit tests.☆71Updated last year
- osquery input plugin☆10Updated 7 years ago
- Open source tool for processing OSCAL based FedRAMP SSPs☆44Updated last year
- NIST OSCAL SDK and CLI☆39Updated 5 years ago
- YAML schema, examples, and validators for OpenControl format.☆76Updated 6 years ago
- This tool allows using a SPIFFE JWT to authenticate to AWS APIs☆36Updated 2 months ago
- cloud native software supply chain ☁️🔗☆65Updated 4 years ago
- GCP PCI-DSS 3.2.1 InSpec Profile☆18Updated 4 years ago
- Utilities for programmatic analysis of Cartography data.☆40Updated last week
- 🎟 Voucher creates attestations for Binary Authorization☆74Updated 2 months ago
- Darkbit Cloud Security Tools☆25Updated 5 years ago
- Kubernetes Common Configuration Scoring System☆121Updated 3 years ago
- EXPERIMENTAL: a template builder for FedRAMP System Security Plans☆39Updated 6 years ago
- Machine readable cybersecurity compliance standards library for Python, starting with FISMA and NIST Risk Management Framework☆63Updated 5 years ago
- Hexa Policy Orchestrator enables you to manage all of your access policies consistently across software providers.☆105Updated 8 months ago
- Controls for Amazon Web Services☆26Updated 6 years ago
- Reasonably Usable Self-hosted Version of OPA's Playground☆36Updated 8 months ago
- GCP Auto Remediation Suite for High Risk Events☆43Updated 4 years ago
- Compliance-to-Policy (C2P) provides the framework to bridge the gap between compliance and policy administration.☆36Updated 3 weeks ago
- This project demonstrates a series of best practices for improving the security of containerized applications deployed to Kubernetes Engi…☆71Updated last year
- Take this course to learn how to create fine-grained, least-privilege HashiCorp Vault roles for GitHub Action workflows using GitHub OIDC…☆15Updated last week
- Golang library which provides functionality to evaluate GCP resources against Rego-based policies☆48Updated 2 weeks ago
- Securing Alice's, Bob's and Carl's software supply chain using in-toto☆104Updated 2 weeks ago
- vexctl is a tool to attest VEX impact statements☆45Updated 2 years ago
- Demo setup for compliance-trestle☆37Updated 2 weeks ago
- SPIFFE Federation the easy way☆21Updated 9 months ago
- A command-line tool for streamlining end-to-end compliance workflows on local systems.☆29Updated this week
- Github Audit Tool for Organizations☆37Updated last month
- Collect, curate, and communicate relevant security metrics for open source projects.☆63Updated last year
- Enable Falco to read audit logs from EKS☆11Updated 5 years ago