5 projects
audit-packs
GitHub Action that maps IaC security findings to compliance framework controls and posts evidence-backed inline PR review comments. Supports Checkov, Semgrep, CodeQL, Trivy, tfsec, and gitleaks.
audit-packs-mapping
Compliance mapping, coverage, and OSCAL export for audit-packs
audit-packs-evidence
Evidence enrichment and detection agents for audit-packs
audit-packs-core
Core models, normalization, diff, and data-flow primitives for audit-packs
audit-packs-ai
AI verification and confidence scoring for audit-packs
