This script takes a dataset that meets the Orcro licence list definition, and produces generalized compliance artefacts.

Perform near real-time "Automatic" remediation of CIS v1.4.0 NON-COMPLIANT resources in IAM, Storage, Monitoring, Logging, and Networking in an AWS Multi-account setup using Security Hub Findings

A python program which parses student transcript data to determine eligibility

Hassle-free git hooks for python projects

Security compliance automation tool that allows business upload evidences to match respect ISO controls.

Ansible module to deploy and configure auditd in a compliant way

REG-SEC-GPO is a Registry and GPO auditing and reporting PowerShell tool.

Verify that the dependencies of package.json are licensed in a way that allows their use in a given project

Kubernetes operator for the OSS Review Toolkit

compliance as code

This action runs a sourcehawk scan on the repository source code

Automatizando a varredura de segurança em imagem no AWS ECR

OpenStack compliance rules checker

Hands-on source code for getting started and deep dives of the Kosli features for all types of technologies.

Repository for the Azure Governance Best Practices: Ensuring Compliance with Policy-driven Guardrails blog post, to implement policy-driven guardrails using Terraform.

Automate Windows Defender STIG to 100% Compliance

A simple action to check if a Go project depends on packages with disallowed licenses

Golang version of the Secrender tool

COSA (Compliance Orchestration Situational Awareness) is a multi-part system which allows teams to integrate compliance into a CI/CD pipeline, shift security left (in the DevSecOps process), and track/report progress towards compliance goals. It orchestrates a series of tests, each of which may be automated, manual, or inherited. As a result, it…

{productivity, compliance} - choose two