gborough / roscalLinks
Open Security Controls Assessment Language Toolbox
☆16Updated 3 weeks ago
Alternatives and similar repositories for roscal
Users that are interested in roscal are comparing it to the libraries listed below
Sorting:
- An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.☆220Updated this week
- A list of tools, blog posts, and other resources that further the use and adoption of OSCAL standards.☆196Updated 5 months ago
- A library of React components and an example user interface application that provides a direct UI into NIST's Open Security Controls Asse…☆63Updated last year
- A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)☆211Updated last month
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆111Updated 2 weeks ago
- ☆19Updated last year
- Open source tool for processing OSCAL based FedRAMP SSPs☆43Updated last year
- Tool for collecting vulnerability data from various sources (used to build the grype database)☆107Updated last week
- Various deployments of the OSCAL editor☆47Updated last year
- sbomasm: The Complete SBOM Management Toolkit☆94Updated last week
- Demo setup for compliance-trestle☆35Updated 2 weeks ago
- Utility that provides an API platform for validating, querying and managing BOM data☆123Updated 2 months ago
- Automatically assess and score software repositories for supply chain risk.☆114Updated 3 weeks ago
- Automate the creation of a System Security Plan (SSP)☆43Updated last week
- Sunshine - SBOM visualization tool☆88Updated last week
- OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secon…☆201Updated last week
- A standard API specification for exchanging supply chain artifacts and intelligence☆95Updated last month
- Repository for on-going work as part of the SBOM for AI Tiger Team effort.☆40Updated 4 months ago
- ☆122Updated this week
- A simple open source command line tool to support common operations over OSCAL content.☆57Updated last week
- Enrich SBOMs with data from third party services☆202Updated this week
- Machine-readable specification for the attestation of security-relevant data.☆67Updated 3 months ago
- A case study for ACSAC 2022 utilizing OSCAL with a custom GitHub action to automate assessments.☆23Updated 2 years ago
- A BOM repository server for distributing CycloneDX BOMs☆86Updated 5 months ago
- Functionality and DataModels of OWASP CycloneDX for Python☆96Updated this week
- Automatically generated diagrams for OSCAL models☆20Updated 3 years ago
- OpenVEX Specification☆162Updated 6 months ago
- Agile authoring tutorial and repo set-up tooling☆23Updated last year
- Scripts to import OSCAL example content into the Neo4J graph database☆29Updated 2 years ago
- Connect compliance frameworks like SOC 2, GDPR, and ISO 27001 using Secure Control Frameworks mappings.☆20Updated last year