Go
kyverno/kyverno
Unified Policy as Code
Apache-2.028. Aug. 2026 · Metriken 2.10.0
Alle Tags
Katalog-Tag
#compliance
Alle Repositories im öffentlichen Register, die dieses Tag tragen — aus ihren GitHub-Topics oder den von ihren Paket-Registries veröffentlichten Schlagwörtern. Die Gesundheit wird nach derselben versionierten Methodik gemessen wie im übrigen Register.
163 Einträge
PyPI · npm
prowler-cloud/prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
Apache-2.027. Aug. 2026 · Metriken 2.10.0
PyPI · RubyGems
bridgecrewio/checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Apache-2.028. Aug. 2026 · Metriken 2.10.0
PyPI
cloud-custodian/cloud-custodian
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
Apache-2.019. Okt. 2026 · Metriken 2.10.0
npm · PyPI
intuitem/ciso-assistant-community
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
Eigene Lizenz28. Aug. 2026 · Metriken 2.10.0
Go · npm
open-policy-agent/opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Apache-2.027. Aug. 2026 · Metriken 2.10.0
PyPI
oscal-compass/compliance-trestle
An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.
Apache-2.019. Okt. 2026 · Metriken 2.10.0
Go
chainloop-dev/chainloop
SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
Apache-2.09. Sept. 2026 · Metriken 2.10.0
npm
wazuh/wazuh-dashboard-plugins
Plugins for Wazuh Dashboard
GPL-2.019. Sept. 2026 · Metriken 2.10.0
npm · Go · crates.io
microsoft/agent-governance-toolkit
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
MIT28. Aug. 2026 · Metriken 2.10.0
Go
mondoohq/cnspec
An open source, cloud-native security to protect everything from build to runtime
Eigene Lizenz17. Okt. 2026 · Metriken 2.10.0
Maven · npm
oss-review-toolkit/ort
A suite of tools to automate software compliance checks.
Apache-2.09. Sept. 2026 · Metriken 2.10.0
Go · npm
Bearer/bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Eigene Lizenz20. Sept. 2026 · Metriken 2.10.0
npm
Hack23/cia-compliance-manager
The CIA Compliance Manager is an application that helps organizations assess and manage the availability, integrity, and confidentiality of their systems and data based on customizable security levels, providing real-time cost estimates, business impact assessments, and technical implementation details.
Apache-2.010. Sept. 2026 · Metriken 2.10.0
Go
codenotary/immudb
immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
Eigene Lizenz17. Sept. 2026 · Metriken 2.10.0
Go
getplumber/plumber
Plumber detects CI/CD security issues in your GitHub workflows and gives you a score
MPL-2.010. Sept. 2026 · Metriken 2.10.0
Go · npm
getprobo/probo
Open source solutions for SOC2, GDPR, and ISO27001
MIT11. Sept. 2026 · Metriken 2.10.0
RubyGems · Go
inspec/inspec
InSpec: Auditing and Testing Framework
Eigene Lizenz11. Sept. 2026 · Metriken 2.10.0
npm · PyPI
resilient-tech/india-compliance
Simple, yet powerful compliance solutions for Indian businesses
GPL-3.020. Sept. 2026 · Metriken 2.10.0
PyPI
wazuh/wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Eigene Lizenz20. Sept. 2026 · Metriken 2.10.0
PyPI · npm
sipyourdrink-ltd/bernstein
The open‑source AI Agents Governance & Orchestration framework: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run
Apache-2.014. Sept. 2026 · Metriken 2.10.0
—
wazuh/wazuh-docker
Wazuh - Docker containers
Eigene Lizenz20. Sept. 2026 · Metriken 2.10.0
crates.io · npm · PyPI
aws-cloudformation/cloudformation-guard
Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0
Apache-2.020. Okt. 2026 · Metriken 2.10.0
npm
pa11y/pa11y
Pa11y is your automated accessibility testing pal
LGPL-3.02. Okt. 2026 · Metriken 2.10.0
PyPI
spdx/ntia-conformance-checker
Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.
Apache-2.019. Sept. 2026 · Metriken 2.10.0
npm · PyPI
OWASP/openshield
Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command
MIT16. Sept. 2026 · Metriken 2.10.0
Go
gardener/diki
Diki is a compliance checker that aims to enhance the security posture of your Kubernetes clusters.
Apache-2.015. Sept. 2026 · Metriken 2.10.0
npm
mitre/saf
The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
Eigene Lizenz27. Sept. 2026 · Metriken 2.10.0
npm · PyPI
bcgov/lcfs
An online application for fuel suppliers to manage their compliance obligations under the Low Carbon Fuels Act
Apache-2.019. Okt. 2026 · Metriken 2.10.0
—
wazuh/wazuh-ansible
Wazuh - Ansible playbook
Eigene Lizenz19. Sept. 2026 · Metriken 2.10.0