oscal-compass / compliance-trestle
An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.
☆182Updated this week
Alternatives and similar repositories for compliance-trestle:
Users that are interested in compliance-trestle are comparing it to the libraries listed below
- A list of tools, blog posts, and other resources that further the use and adoption of OSCAL standards.☆163Updated this week
- A library of React components and an example user interface application that provides a direct UI into NIST's Open Security Controls Asse…☆58Updated last year
- FedRAMP Automation☆327Updated 2 weeks ago
- Various deployments of the OSCAL editor☆46Updated 8 months ago
- An initial OpenAPI definition of an OSCAL REST API.☆39Updated 7 months ago
- A simple open source command line tool to support common operations over OSCAL content.☆48Updated 10 months ago
- A repository containing OSCAL serializations of the CIS Critical Security Controls☆48Updated last month
- A case study for ACSAC 2022 utilizing OSCAL with a custom GitHub action to automate assessments.☆24Updated 2 years ago
- Tools for the OSCAL project☆36Updated 2 years ago
- Open source tool for processing OSCAL based FedRAMP SSPs☆38Updated 6 months ago
- NIST SP 800-53 content and other OSCAL content examples☆341Updated this week
- Demo setup for compliance-trestle☆33Updated last month
- Joint NIST/FedRAMP tool to interact with OSCAL files via a browser-based GUI☆43Updated 5 years ago
- The community area and documents about Code of Conduct.☆18Updated 4 years ago
- Scripts to import OSCAL example content into the Neo4J graph database☆28Updated 2 years ago
- The Auditree framework tool to run compliance control checks as unit tests.☆63Updated 8 months ago
- A Java library to support processing OSCAL content☆34Updated 2 weeks ago
- Implementation of the OSCAL REST API☆19Updated last year
- Automatically generated diagrams for OSCAL models☆18Updated 3 years ago
- This repository is a collection of resources to help facilitate compliance innovation utilizing Cloud, DevSecOps and Software Factory tec…☆71Updated last year
- An open source, self-service GRC tool to automate security assessments and compliance.☆189Updated 4 months ago
- Compliance-to-Policy (C2P) provides the framework to bridge the gap between compliance and policy administration.☆25Updated 3 weeks ago
- ☆16Updated 11 months ago
- Open Security Controls Assessment Language (OSCAL)☆735Updated last week
- ☆16Updated 7 months ago
- NIST SP 800-53, Security and Privacy Controls for Federal Information Systems and Organizations☆39Updated 3 months ago
- Continuous Audit Metrics☆26Updated 10 months ago
- ☆14Updated last week
- ☆18Updated 3 years ago
- ☆16Updated last year