Go
kyverno/kyverno
Unified Policy as Code
Apache-2.0Aug 28, 2026 · metrics 2.10.0
All tags
Catalogue tag
#compliance
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
164 records
PyPI · npm
prowler-cloud/prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
PyPI · RubyGems
bridgecrewio/checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
cloud-custodian/cloud-custodian
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm · PyPI
intuitem/ciso-assistant-community
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
Custom licenseAug 28, 2026 · metrics 2.10.0
Go · npm
open-policy-agent/opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
PyPI
oscal-compass/compliance-trestle
An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
chainloop-dev/chainloop
SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
Apache-2.0Sep 9, 2026 · metrics 2.10.0
npm
wazuh/wazuh-dashboard-plugins
Plugins for Wazuh Dashboard
GPL-2.0Sep 19, 2026 · metrics 2.10.0
npm · Go · crates.io
microsoft/agent-governance-toolkit
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
MITAug 28, 2026 · metrics 2.10.0
Go
mondoohq/cnspec
An open source, cloud-native security to protect everything from build to runtime
Custom licenseOct 17, 2026 · metrics 2.10.0
Maven · npm
oss-review-toolkit/ort
A suite of tools to automate software compliance checks.
Apache-2.0Sep 9, 2026 · metrics 2.10.0
Go · npm
Bearer/bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
Hack23/cia-compliance-manager
The CIA Compliance Manager is an application that helps organizations assess and manage the availability, integrity, and confidentiality of their systems and data based on customizable security levels, providing real-time cost estimates, business impact assessments, and technical implementation details.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
codenotary/immudb
immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
getplumber/plumber
Plumber detects CI/CD security issues in your GitHub workflows and gives you a score
MPL-2.0Sep 10, 2026 · metrics 2.10.0
Go · npm
getprobo/probo
Open source solutions for SOC2, GDPR, and ISO27001
MITSep 11, 2026 · metrics 2.10.0
RubyGems · Go
inspec/inspec
InSpec: Auditing and Testing Framework
Custom licenseSep 11, 2026 · metrics 2.10.0
npm · PyPI
resilient-tech/india-compliance
Simple, yet powerful compliance solutions for Indian businesses
GPL-3.0Sep 20, 2026 · metrics 2.10.0
PyPI
wazuh/wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Custom licenseSep 20, 2026 · metrics 2.10.0
PyPI · npm
sipyourdrink-ltd/bernstein
The open‑source AI Agents Governance & Orchestration framework: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run
Apache-2.0Sep 14, 2026 · metrics 2.10.0
—
wazuh/wazuh-docker
Wazuh - Docker containers
Custom licenseSep 20, 2026 · metrics 2.10.0
crates.io · npm · PyPI
aws-cloudformation/cloudformation-guard
Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
pa11y/pa11y
Pa11y is your automated accessibility testing pal
LGPL-3.0Oct 2, 2026 · metrics 2.10.0
PyPI
spdx/ntia-conformance-checker
Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm · PyPI
OWASP/openshield
Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command
MITSep 16, 2026 · metrics 2.10.0
Go
gardener/diki
Diki is a compliance checker that aims to enhance the security posture of your Kubernetes clusters.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
mitre/saf
The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
Custom licenseSep 27, 2026 · metrics 2.10.0
npm · PyPI
bcgov/lcfs
An online application for fuel suppliers to manage their compliance obligations under the Low Carbon Fuels Act
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
wazuh/wazuh-ansible
Wazuh - Ansible playbook
Custom licenseSep 19, 2026 · metrics 2.10.0