ohsh6o Goto Github PK

aticc

Assessment of Trusted Internet Connection Compliance (ATICC) Dashboard

capi-sidecar-samples

Sample apps demonstrating how to use sidecar processes in Cloud Foundry

cdxgen-action

GitHub action for CycloneDX BOM generator (cdxgen). cdxgen produced bom xml file can be uploaded to dependency track, AppThreat and other commercial Software Composition Analysis (SCA) products

cf-blue-green-deploy

Cloud Foundry CLI plugin for zero downtime deploys

cg-cli-tools

A Github action for using CF CLI tools while deploying and managing apps on cloud.gov

community-contribs

DefectDojo Community Content

compliance-trestle

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

decoderring

diffx

An XML difference tool in Java

dim

Dynamic Information Model

django-defectdojo

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

docker-sonarqube

eks-brokerpak

Broker AWS EKS instances using the OSBAPI (eg from cloud.gov)

eregs-ssp

Experimental: Rendering SSP into the eRegs Platform

fedramp-automation

FedRAMP Automation

fedramp-gsuite-utils

A collection of Google Apps Script resources to process FedRAMP Word and Excel templates when stored in the GSA GSuite environment.

fedramp-tailored

FedRAMP Tailored.

fismatic

handbook

The home of policies and guidelines that make up TTS.

joval

An open-source JAXB data model for SCAP specification formats.

jsontron

Schematron based JSON Semantic Validator

little-differ

A semantic diffing utility for certain types of XML models.

log-capture-decorator

Decorator buildpack demonstrating application log capture by a sidecar process

metaschema-java

Java tools and libraries providing a Metaschema toolchain

nistexample

Example of how to do xml parsing for NIST data xml to MS word document.

opal

OSCAL Policy Administration Library (OPAL) provides a simple web application for managing System Security Plans. The data modle is based on the OSCAL standard.

oscal

Open Security Controls Assessment Language (OSCAL)

oscal-cli

oscal-content

NIST SP 800-53 content and other OSCAL content examples

oscal-deep-diff

[WIP] Open Security Controls Assessment Language (OSCAL) Deep Differencing Tool