audit-packs-core
audit-packs-core contains the foundational models, normalization logic, git diff parser, and source-to-sink data-flow primitives for the audit-packs ecosystem.
⚠️ IMPORTANT: This is a sub-package of the
audit-packscompliance mapping toolkit. It is NOT designed to be run as a standalone CLI tool. If you are looking for the main CLI and GitHub Action scanner execution engine, please install and refer to audit-packs.
📦 Installation
You can install this package via pip if you are writing custom extensions or building on top of the audit-packs data structures:
pip install audit-packs-core
🛠️ API Surface & Modules
| Module | Key API Exports | Description |
|---|---|---|
audit_packs_core.models |
Finding, ControlFinding, ControlStatus, AdjudicationResult |
Core compliance structures and type schemas. |
audit_packs_core.normalize |
sarif_to_findings(), extract_rule_confidences() |
Standardizes engine-specific SARIF JSON outputs into standard Finding instances. |
audit_packs_core.diff |
parse_unified_diff() |
Compares line numbers between refs to filter PR-changed lines. |
audit_packs_core.dataflow |
extract_data_flows(), flow_confidence() |
Tracks source-to-sink data flow dependencies (Python/YAML/HCL/JSON). |
audit_packs_core.trust |
TrustPolicy, repo_config_allowed() |
Repo-config trust gate: controls whether workspace-supplied AST rules, scanner plugins, and model configs are honored (requires AUDIT_ALLOW_REPO_CONFIG opt-in). |
audit_packs_core.redact |
redact_evidence(), mask_evidence(), add_masked_engine() |
Single chokepoint for redacting secrets from evidence strings before any output sink. |
📦 Ecosystem Architecture
audit-packs is built as a modular ecosystem consisting of five Python packages:
| Package | PyPI Link | Role | Standalone? |
|---|---|---|---|
audit-packs |
pypi | Main CLI & Action entrypoint | Yes |
audit-packs-core |
pypi | Primitives, diff parsing, normalization | No |
audit-packs-mapping |
pypi | Compliance pack loader & OSCAL exporter | No |
audit-packs-evidence |
pypi | Evidence collectors & heuristic agents | No |
audit-packs-ai |
pypi | LLM consensus & confidence scoring | No |
🔗 Related Resources
- Main GitHub Repository: https://github.com/prakharsingh/audit-packs
- Documentation & Setup: docs/SETUP.md
- Issue Tracker: https://github.com/prakharsingh/audit-packs/issues
📄 License
This library is licensed under the Apache-2.0 License. See the LICENSE file in the main repository for details.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file audit_packs_core-0.8.0.tar.gz.
File metadata
- Download URL: audit_packs_core-0.8.0.tar.gz
- Upload date:
- Size: 13.8 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/6.1.0 CPython/3.13.13
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
089531197ed142d905ff56b88a6c62b36cd38f31fb9bda634e213579325454b7
|
|
| MD5 |
13553be014b48df206dd4aab66447109
|
|
| BLAKE2b-256 |
a0f4cfb1682100faf7c43eaaa979350d881eed4cc712a8cb7d3322edbb4a4871
|
File details
Details for the file audit_packs_core-0.8.0-py3-none-any.whl.
File metadata
- Download URL: audit_packs_core-0.8.0-py3-none-any.whl
- Upload date:
- Size: 14.5 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/6.1.0 CPython/3.13.13
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
eeed57bd63a4169f8b74ff08391cd1f85749c15113daf7b2a32d47d2e3e9f9e4
|
|
| MD5 |
96a69714a8643c0d309436e4a1b0fe67
|
|
| BLAKE2b-256 |
812f649be3e1cb0ac46ac0a04904d9cc6410f74bbf97419cde29200c7fb9af84
|
