Alternatives and similar repositories for oscalkit

Users that are interested in oscalkit are comparing it to the libraries listed below

• defenseunicorns / go-oscal
  Repository for the generation of OSCAL data types
  ☆24Updated 2 weeks ago
• ComplianceAsCode / oscal
  OSCAL SSP content for technologies shipped by Red Hat
  ☆15Updated 2 years ago
• GoComply / fedramp
  Open source tool for processing OSCAL based FedRAMP SSPs
  ☆39Updated 7 months ago
• chainguard-dev / self-attestation
  Markdown Version of the DHS/CISA Secure Software Development Self Attestation Form.
  ☆21Updated 2 years ago
• oscal-compass / compliance-trestle-agile-authoring
  Agile authoring tutorial and repo set-up tooling
  ☆19Updated 8 months ago
• opencybersecurityalliance / PACE
  Posture Attribute Collection and Evaluation
  ☆23Updated last year
• CivicActions / ssp-toolkit
  Automate the creation of a System Security Plan (SSP)
  ☆38Updated 3 weeks ago
• chainguard-dev / bomshell
  An SBOM query language and associated utilities
  ☆54Updated last year
• brian-ruf / OSCAL-GUI
  Joint NIST/FedRAMP tool to interact with OSCAL files via a browser-based GUI
  ☆43Updated 5 years ago
• prancer-io / prancer-compliance-test
  This repository includes cloud security policies for IaC and live resources.
  ☆39Updated 11 months ago
• CivicActions / oscal-component-definitions
  OSCAL reusable component definitions library
  ☆12Updated 2 months ago
• docker-archive / oscalkit
  NIST OSCAL SDK and CLI
  ☆38Updated 5 years ago
• turbot / steampipe-plugin-exec
  Use SQL to instantly query & run shell commands on local & remote servers. Open source CLI. No DB required.
  ☆11Updated last week
• Agh42 / oscal4neo4j
  Scripts to import OSCAL example content into the Neo4J graph database
  ☆28Updated 2 years ago
• chainguard-dev / github-audit-alerter
  Slack alert bot for matching Github Audit Events
  ☆10Updated 6 months ago
• oscal-compass / compliance-trestle-demos
  Demo setup for compliance-trestle
  ☆34Updated 2 months ago
• GoogleCloudPlatform / inspec-gcp-pci-profile
  GCP PCI-DSS 3.2.1 InSpec Profile
  ☆18Updated 4 years ago
• aquasecurity / go-git-pr-commenter
  library for adding comments to git PRs
  ☆14Updated 8 months ago
• chainguard-dev / vex
  vexctl is a tool to attest VEX impact statements
  ☆44Updated 2 years ago
• GoComply / scap
  A GO module of the Security Content Automation Protocol (SCAP) Specification
  ☆14Updated this week
• GovReady / govready-deployments
  Docker build of GovReady
  ☆14Updated last year
• mitre / emass_client
  The eMASS client repository maintains the Enterprise Mission Assurance Support Service (eMASS) Representational State Transfer (REST) App…
  ☆17Updated 2 months ago
• tacosframework / TACOS-spec
  TACOS framework structural details
  ☆20Updated 3 weeks ago
• CivicActions / compliance-io
  Python library for reading/writing compliance as code
  ☆11Updated last year
• jsotiro / docker-multiscan
  A multi scanner for docker images. It drives Clair, Anchore, Trivy, Snyk, Grype, AWS ECR scans and consolidates the results.
  ☆14Updated last year
• gborough / roscal
  Open Security Controls Assessment Language Toolbox
  ☆13Updated 2 weeks ago
• VexStore / fatbom
  fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool'…
  ☆32Updated 2 years ago
• aws / aws-signer-notation-plugin
  AWS Signer Plugin for Notation
  ☆12Updated last week
• ComplianceAsCode / auditree-framework
  The Auditree framework tool to run compliance control checks as unit tests.
  ☆67Updated 9 months ago
• turbot / steampipe-plugin-prometheus
  Use SQL to instantly query Prometheus metrics, alerts, labels and more. Open source CLI. No DB required.
  ☆18Updated last week