compliance-as-code
There are 7 repositories under compliance-as-code topic.
HummerRisk / HummerRisk
HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。
Language:Java 1776ansible-lockdown / RHEL7-CIS
Ansible role for Red Hat 7 CIS Baseline
Language:YAML 472- titan
Titan-Systems / titan
Titan Core - Snowflake infrastructure-as-code. Provision environments, automate deploys, CI/CD. Manage RBAC, users, roles, and data access. Declarative Python Resource API. Change Management tool for the Snowflake data warehouse.
Language:Python 365 Ansible role for Red Hat 7 STIG Baseline
Language:YAML 282awslabs / aws-config-engine-for-compliance-as-code
Manage AWS Config Rules at scale in AWS multi-account and/or multi-region environment; with fully configurable deployment (RuleSets) and analytics.
Language:Python 274Ansible role for Red Hat 8 CIS Baseline
Language:YAML 256Ansible role for Ubuntu 2004 CIS Baseline
Language:YAML 174Ansible role for Ubuntu22 CIS Baseline
Language:YAML 170CIS Baseline Ansible Role for Windows 2019
Language:YAML 132Ansible role for Red Hat 9 CIS Baseline
Language:YAML 109gjyoung1974 / soc2-policy-templates
Template SOC2 Policy Authority - documentation pipeline
Language:HTML 95Ansible role for Red Hat 8 STIG Baseline
Language:YAML 94paulveillard / cybersecurity-SOAR
A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Security Orchestration, Automation and Response (SOAR).
aws-samples / aws-control-tower-controls-terraform
This repository describes how to use AWS Control Tower controls, HashiCorp Terraform, and infrastructure as code (IaC) to implement and administer preventive, detective, and proactive security controls. A control (also known as a guardrail) is a high-level rule that provides ongoing governance for your overall AWS Control Tower environment.
Language:HCL 67- introspector
goldfiglabs / introspector
A schema and set of tools for using SQL to query cloud infrastructure.
Language:Python 66 Pre-configured response & remediation playbooks for AWS Security Hub
CIS Baseline Ansible Role for Windows 2022
Language:YAML 62- auditree-framework
ComplianceAsCode / auditree-framework
The Auditree framework tool to run compliance control checks as unit tests.
Language:Python 58 deepfence / deepfence_runtime_api
Deepfence Runtime API & code samples
Language:HTML 50ethyca / fidesops
Privacy as Code for DSAR Orchestration: Privacy Request automation to fulfill GDPR, CCPA, and LGPD data subject requests.
Language:Python 48STIG Baseline Ansible Role for Windows 2019
Language:YAML 35Audit for Ubuntu 22 CIS
Language:YAML 33Implements OPA-based preventive security controls for AWS Infrastructure using Terraform Infrastructure as Code (IaC), that can establish a security baseline and safeguard resources before deployment into the AWS Accounts and reduce security risks.
Language:Open Policy Agent 32zsolt-halo / aws-config-advanced-query
A collection of useful queries that can be used to verify compliance/security across your AWS assets
Language:TSQL 31CIS Baseline Ansible Role for Ubuntu 18
Language:YAML 30Ansible role for Amazon Linux 2 CIS Baseline
Language:YAML 28CIS Baseline Ansible Role for Windows 2016
Language:YAML 23usnistgov / blossom-case-study
A case study for ACSAC 2022 utilizing OSCAL with a custom GitHub action to automate assessments.
Language:HTML 23Ansible role for Amazon2023 CIS Baseline
Language:YAML 22CIS Baseline Ansible Role for Kubernetes 1.6.1
Audit configurations for RHEL7 CIS
Language:YAML 21Audit configurations for RHEL9 CIS
Language:YAML 18Hardened Windows Server image
Language:HTML 17A collection of awesome framework, libraries, documents, learning tutorials, resources about SOC 2 tools and processes.
undergroundwires / ez-consent
🍪 Minimal & vanilla JS only cookie consent banner with no dependencies.
Language:JavaScript 17CIS Audit configurations for Ubuntu20.04LTS - utilising goss
Language:YAML 16