Go
kyverno/kyverno
Unified Policy as Code
Apache-2.02026年8月28日 · 指标 2.10.0
全部标签
目录标签
#compliance
公开记录中带有此标签的全部仓库——标签来自其 GitHub 主题或软件包注册表发布的关键词。健康度量遵循与记录其余部分相同的版本化方法论。
163 条记录
PyPI · npm
prowler-cloud/prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
Apache-2.02026年8月27日 · 指标 2.10.0
PyPI · RubyGems
bridgecrewio/checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Apache-2.02026年8月28日 · 指标 2.10.0
PyPI
cloud-custodian/cloud-custodian
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
Apache-2.02026年10月19日 · 指标 2.10.0
npm · PyPI
intuitem/ciso-assistant-community
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
自定义许可证2026年8月28日 · 指标 2.10.0
Go · npm
open-policy-agent/opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Apache-2.02026年8月27日 · 指标 2.10.0
PyPI
oscal-compass/compliance-trestle
An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.
Apache-2.02026年10月19日 · 指标 2.10.0
Go
chainloop-dev/chainloop
Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipelines did, checked against policies as code, with the loop closed in CI/CD. AI sessions, SBOMs, VEX, SARIF and SLSA provenance, built on Sigstore and in-toto. Apache 2.0.
Apache-2.02026年10月23日 · 指标 2.10.0
npm
wazuh/wazuh-dashboard-plugins
Plugins for Wazuh Dashboard
GPL-2.02026年9月19日 · 指标 2.10.0
npm · Go · crates.io
microsoft/agent-governance-toolkit
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
MIT2026年8月28日 · 指标 2.10.0
Go
mondoohq/cnspec
An open source, cloud-native security to protect everything from build to runtime
自定义许可证2026年10月17日 · 指标 2.10.0
Maven · npm
oss-review-toolkit/ort
A suite of tools to automate software compliance checks.
Apache-2.02026年9月9日 · 指标 2.10.0
Go · npm
Bearer/bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
自定义许可证2026年9月20日 · 指标 2.10.0
npm
Hack23/cia-compliance-manager
The CIA Compliance Manager is an application that helps organizations assess and manage the availability, integrity, and confidentiality of their systems and data based on customizable security levels, providing real-time cost estimates, business impact assessments, and technical implementation details.
Apache-2.02026年9月10日 · 指标 2.10.0
Go
codenotary/immudb
immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
自定义许可证2026年9月17日 · 指标 2.10.0
Go
getplumber/plumber
Plumber detects CI/CD security issues in your GitHub workflows and gives you a score
MPL-2.02026年9月10日 · 指标 2.10.0
Go · npm
getprobo/probo
Open source solutions for SOC2, GDPR, and ISO27001
MIT2026年9月11日 · 指标 2.10.0
RubyGems · Go
inspec/inspec
InSpec: Auditing and Testing Framework
自定义许可证2026年9月11日 · 指标 2.10.0
npm · PyPI
resilient-tech/india-compliance
Simple, yet powerful compliance solutions for Indian businesses
GPL-3.02026年9月20日 · 指标 2.10.0
PyPI
wazuh/wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
自定义许可证2026年9月20日 · 指标 2.10.0
PyPI · npm
sipyourdrink-ltd/bernstein
The open‑source AI Agents Governance & Orchestration framework: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run
Apache-2.02026年9月14日 · 指标 2.10.0
—
wazuh/wazuh-docker
Wazuh - Docker containers
自定义许可证2026年9月20日 · 指标 2.10.0
crates.io · npm · PyPI
aws-cloudformation/cloudformation-guard
Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0
Apache-2.02026年10月20日 · 指标 2.10.0
npm
pa11y/pa11y
Pa11y is your automated accessibility testing pal
LGPL-3.02026年10月2日 · 指标 2.10.0
PyPI
spdx/ntia-conformance-checker
Validate SPDX 2 and 3 SBOM against NTIA, CISA, and other minimum element requirements.
Apache-2.02026年9月19日 · 指标 2.10.0
npm · PyPI
OWASP/openshield
Open source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with one command
MIT2026年9月16日 · 指标 2.10.0
Go
gardener/diki
Diki is a compliance checker that aims to enhance the security posture of your Kubernetes clusters.
Apache-2.02026年9月15日 · 指标 2.10.0
npm
mitre/saf
The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
自定义许可证2026年9月27日 · 指标 2.10.0
npm · PyPI
bcgov/lcfs
An online application for fuel suppliers to manage their compliance obligations under the Low Carbon Fuels Act
Apache-2.02026年10月19日 · 指标 2.10.0
—
wazuh/wazuh-ansible
Wazuh - Ansible playbook
自定义许可证2026年9月19日 · 指标 2.10.0