audit-packs-evidence
audit-packs-evidence provides codebase metadata extraction, evidence enrichment, and compliance-specific detection agents for the audit-packs ecosystem.
⚠️ IMPORTANT: This is a sub-package of the
audit-packscompliance mapping toolkit. It is NOT designed to be run as a standalone CLI tool. If you are looking for the main CLI and GitHub Action scanner execution engine, please install and refer to audit-packs.
📦 Installation
Install this package via pip if you are constructing custom evidence collection or developing additional detection agents:
pip install audit-packs-evidence
🛠️ API Surface & Modules
| Module | Key API Exports | Description |
|---|---|---|
audit_packs_evidence.evidence |
enrich(), fetch_pr_context(), evidence_confidence() |
Fetches Git, PR, and local file context to attach cryptographic/audit-ready evidence strings. |
audit_packs_evidence.agents |
DetectionAgent (ABC), build_agents(frameworks, packs_dir), GDPRAgent, HIPAAAgent, SOC2Agent, FedRAMPAgent, OrgPolicyAgent, DataFlowAgent, Nist80053Agent |
Abstract base class and factory for framework-specific detection agents running heuristics not coverable by traditional static engines. |
🔍 Specialized Detection Agents
Some compliance controls require auditing codebase configuration states that standard IaC tools do not cover. The package bundles programmatic agents:
Nist80053Agent: Automatically scans configuration manifests (such asrequirements.txt,pyproject.toml,package.json, andCargo.toml) to detect unpinned dependencies and wildcards, mapping findings directly to the NIST SI-2 (Flaw Remediation) control.DataFlowAgent: Runs source-to-sink dependency flow tracing to measure flow-sensitive compliance risks.
📦 Ecosystem Architecture
audit-packs is built as a modular ecosystem consisting of five Python packages:
| Package | PyPI Link | Role | Standalone? |
|---|---|---|---|
audit-packs |
pypi | Main CLI & Action entrypoint | Yes |
audit-packs-core |
pypi | Primitives, diff parsing, normalization | No |
audit-packs-mapping |
pypi | Compliance pack loader & OSCAL exporter | No |
audit-packs-evidence |
pypi | Evidence collectors & heuristic agents | No |
audit-packs-ai |
pypi | LLM consensus & confidence scoring | No |
🔗 Related Resources
- Main GitHub Repository: https://github.com/prakharsingh/audit-packs
- Documentation & Setup: docs/SETUP.md
- Issue Tracker: https://github.com/prakharsingh/audit-packs/issues
📄 License
This library is licensed under the Apache-2.0 License. See the LICENSE file in the main repository for details.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file audit_packs_evidence-0.8.0.tar.gz.
File metadata
- Download URL: audit_packs_evidence-0.8.0.tar.gz
- Upload date:
- Size: 12.8 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/6.1.0 CPython/3.13.13
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
8e5bca0ef88b175d8b066f1a9ae71f69ecdd86206e5a3f33400848b4d2ce1e74
|
|
| MD5 |
b7ae5a823bf0245e56a2d3e1f0aa7856
|
|
| BLAKE2b-256 |
8d492012551b194d634c6df3e6eac4c2bbe5129a570ec1f77410eda328c356ee
|
File details
Details for the file audit_packs_evidence-0.8.0-py3-none-any.whl.
File metadata
- Download URL: audit_packs_evidence-0.8.0-py3-none-any.whl
- Upload date:
- Size: 11.8 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/6.1.0 CPython/3.13.13
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
74b51e155f19971ba995abb7fc0af30dfa259621c777606b5d42b503b82ed84f
|
|
| MD5 |
732a75945a6a3b00f41f63400b4dbad6
|
|
| BLAKE2b-256 |
4d3442c176cdf5dca3a321fdf99e891a2cec956080908192f4f89470fdaf5eed
|
