compliance
Here are 284 public repositories matching this topic...
An open source, general-purpose policy engine.
-
Updated
Oct 31, 2020 - Go
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
-
Updated
Oct 30, 2020 - Python
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
-
Updated
Oct 8, 2020 - C
Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls listed here https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf and more than 100 additional checks that help on GDPR, HIPAA and other security requirements.
-
Updated
Oct 30, 2020 - Shell
Describe the problem
when executing an inspec profile from a remote repository with a default branch not named master the following error is returned.
inspec exec https://github.com/org/profile.git
Profile git dependency failed - unable to resolve ma
Wazuh - The Open Source Security Platform
-
Updated
Oct 30, 2020 - C
-
Updated
Oct 30, 2020 - Go
immudb is a lightweight, high-speed immutable database for systems and applications
-
Updated
Oct 30, 2020 - Go
Check to confirm CloudTrail is configured for multi-region.
CloudFormation - IsMultiRegionTrail: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-trail.html
Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber
-
Updated
Sep 12, 2018 - HTML
Security automation content in SCAP, OSCAL, Bash, Ansible, and other formats
-
Updated
Oct 30, 2020 - Python
`make install`
We should make it easier to install this plugin.
There are about ~240 URLs and licenses listed at https://directory.fsf.org/wiki?title=Category:License
We should:
- ensure that we can detect all of them
- ensure that we can detect their URL
We should also add as an "other_urls" ech URL to the corresponding license YAML
a lightweight, security focused, BDD test framework against terraform.
-
Updated
Oct 30, 2020 - Python
Describe the ideal solution
We need a new endpoint that functions as getIntegrationById endpoint.
Describe your use cases
We currently fetching all integration via appsync (or more specifically a sub-category of integrations based on integrationType) and iterate until we find one that matches the integrationId passed.
How frequently would you use such feature
Although, we
NIST Certified SCAP 1.2 toolkit
-
Updated
Oct 27, 2020 - XSLT
The GDPR Checklist
-
Updated
Oct 20, 2020 - JavaScript
Compliance automation framework, focused on SOC2
-
Updated
Sep 17, 2020 - Go
Symmetric Encryption for Ruby Projects using OpenSSL
-
Updated
Aug 20, 2020 - Ruby
REST-API: reuse component expects group id. Is there any endpoint to get group id from group name?
Description
In rest-api, the reuse component has a mandatory parameter reuse_group of type integer which expects group id. But there is no endpoint available to get a group id from the group name.
How to reproduce
Most of the endpoints have group parameter that expects group name of type string. But for the reuse component which has parameter reuse_group, expects group id of typ
The code at
can be simplified now that Stack 2.3.1 supports ls dependencies json.
Continuous Auditing & Configuration
-
Updated
Oct 30, 2020 - Scala
A common framework enabling companies to work together to protect consumers' privacy and data rights.
-
Updated
Jul 30, 2020
Wazuh - Ruleset
-
Updated
Oct 30, 2020 - Python
Description
Currently add_failure takes the values required to create a failure, creates it then adds it to the Result object's failed_rules
On the other hand add_warning takes a Failure object directly.
Proposed solution
The methods should be updated so that they both have the same behavior (or maybe even just add an add_finding method which takes a type that can be either Failure o
List of DNS violations by implementations, software and/or systems
-
Updated
Jul 28, 2020
Wazuh - Docker containers
-
Updated
Oct 29, 2020 - CSS
Wazuh - Kibana plugin
-
Updated
Oct 30, 2020 - JavaScript
Improve this page
Add a description, image, and links to the compliance topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the compliance topic, visit your repo's landing page and select "manage topics."


It would be nice if lynis would gather (and report in the portal/reports) information about user-accounts: