compliance-trestle
An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard. (by oscal-compass)
cli
a lightweight, security focused, BDD test framework against terraform. (by terraform-compliance)
| compliance-trestle | cli | |
|---|---|---|
| 1 | 7 | |
| 144 | 1,327 | |
| 2.1% | 0.8% | |
| 8.0 | 5.3 | |
| 14 days ago | about 1 month ago | |
| Python | Python | |
| Apache License 2.0 | MIT License |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
compliance-trestle
Posts with mentions or reviews of compliance-trestle.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-12-15.
-
OSD600 Release 0.4: Progress
This issue is about creation of a customized jinja tag to insert a specific markdown content header. I have found two useful tutorials, https://github.com/dldevinc/jinja2-simple-tags and https://michaelabrahamsen.com/posts/jinja2-custom-template-tags/. With customized tag, the Python library jinja can have new functionality unique to your own project.
cli
Posts with mentions or reviews of cli.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-01-23.
- terraform-compliance
-
Looking for a tool to enforce policies on terraform files names/content
You could also look at terraform compliance
- Alternative to Terraform Sentinel
-
tf-free: A project to create free resources on all cloud-providers
+1 for tfsec. Another cool tool is terraform-compliance, although I can't say I've used it recently so I'm not sure how it compares to tfsec.
-
Azure terraform-compliance examples?
If you mean this https://terraform-compliance.com/#supporting--requirements then yes, it doesn't support modules if you use Terraform 0.11.x (or lower).
-
Terraforming in 2021 – new features, testing and compliance
A direct open source comparable alternative would be using terraform-compliance. It follows BDD directives so that you can specify in an easy human readable way your expectations, using:
What are some alternatives?
When comparing compliance-trestle and cli you can also consider the following projects:
wazuh-ruleset - Wazuh - Ruleset
tfsec - Security scanner for your Terraform code