audit-packs-mapping
audit-packs-mapping is the compliance framework mapping, posture calculation, and OSCAL export engine for the audit-packs ecosystem.
⚠️ IMPORTANT: This is a sub-package of the
audit-packscompliance mapping toolkit. It is NOT designed to be run as a standalone CLI tool. If you are looking for the main CLI and GitHub Action scanner execution engine, please install and refer to audit-packs.
📦 Installation
Install this package via pip if you are programmatically resolving rules to controls or outputting OSCAL artifacts:
pip install audit-packs-mapping
🛠️ API Surface & Modules
| Module | Key API Exports | Description |
|---|---|---|
audit_packs_mapping.packs |
load_pack(), iter_controls(), map_findings() |
Loads YAML pack definitions and maps raw scanner rule IDs to controls. Resolves crosswalk references. |
audit_packs_mapping.coverage |
compute_coverage() |
Calculates posture metrics (pass, fail, manual review) for active frameworks. |
audit_packs_mapping.oscal |
to_assessment_results() |
Serializes mapped findings into standard NIST Open Security Controls Assessment Language (OSCAL) JSON. |
🏗️ Supported Compliance Frameworks
Framework mappings are maintained as YAML files under packs/ at the repository root (or inside the Docker image at /app/packs). Packs are not bundled inside the wheel; the CLI resolves them at runtime: first --packs-dir / PACKS_DIR env var, then <workspace>/packs, then /app/packs, then falls back to the workspace root so downstream mapping gracefully skips unresolved controls.
- NIST SP 800-53 Rev 5: The canonical pack (maps Checkov/Semgrep rules to NIST).
- Crosswalk Frameworks: SOC 2, HIPAA, GDPR, ISO/IEC 27001, PCI-DSS, FedRAMP, and Custom Org-Policy (resolve crosswalk rules to underlying NIST controls).
📦 Ecosystem Architecture
audit-packs is built as a modular ecosystem consisting of five Python packages:
| Package | PyPI Link | Role | Standalone? |
|---|---|---|---|
audit-packs |
pypi | Main CLI & Action entrypoint | Yes |
audit-packs-core |
pypi | Primitives, diff parsing, normalization | No |
audit-packs-mapping |
pypi | Compliance pack loader & OSCAL exporter | No |
audit-packs-evidence |
pypi | Evidence collectors & heuristic agents | No |
audit-packs-ai |
pypi | LLM consensus & confidence scoring | No |
🔗 Related Resources
- Main GitHub Repository: https://github.com/prakharsingh/audit-packs
- Documentation & Setup: docs/SETUP.md
- Issue Tracker: https://github.com/prakharsingh/audit-packs/issues
📄 License
This library is licensed under the Apache-2.0 License. See the LICENSE file in the main repository for details.
1 maintainer
Metadata
1 maintainer
Release files for audit-packs-mapping 0.9.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| audit_packs_mapping-0.9.0.tar.gz | 8.9 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| audit_packs_mapping-0.9.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 17.4 kB
Release files / audit_packs_mapping-0.9.0.tar.gz
| Download URL | audit_packs_mapping-0.9.0.tar.gz |
|---|---|
| Size | 8.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
ef2f7eef50a9dec2de05b3330fd636138361ef724cd507933dfe02ecdd8ca6b0
|
|
BLAKE2b-256 checksum How to use checksums |
37aae4f19ef75f1428edee15990fa8d743618cd1f05af90e57b257b9e239b721
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.1.0 CPython/3.13.13
|
Release files / audit_packs_mapping-0.9.0-py3-none-any.whl
| Download URL | audit_packs_mapping-0.9.0-py3-none-any.whl |
|---|---|
| Size | 8.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
e4a6e4e908bd9e197daef8fc77a96d227dda794d3f878da3b29034e5f9e57596
|
|
BLAKE2b-256 checksum How to use checksums |
c7ac7bf594a757574b45864b8e7641777a9ec64cc1a68f558e181a4661f6049b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.1.0 CPython/3.13.13
|
