The OSCAL Compass project is set of tools that enable the creation, validation, and governance of documentation artifacts for compliance needs. It leverages NIST's OSCAL (Open Security Controls Assessment Language) as a standard data format for interchange between tools and people, and provides an opinionated approach to OSCAL adoption.
Check out the Community README to get started with using and contributing to the project. The REAMDE also details all the ways to collaborate with project maintainers and your fellow users of OSCAL Compass tools.
Trestle - Command line tool and SDK for interacting with OSCAL-based documents
Agile Authoring - Ready to use CI/CD pipeline configuration and setup using a GitOps approach with Trestle for OSCAL document management and collaboration.
Compliance to Policy (AKA C2P) - C2P bridges compliance-as-code defined in OSCAL and policy validation points (PVP) to generate OSCAL-based results
https://oscal-compass.github.io
Note: This has Trestle specific information
Personas and Roles
Trestle SDK
Artifacts and Personas
Topologies of Compliance Policy Administration Centers
A Lack of Network Boundaries Invites a Lack of Compliance
Compliance to Policy for Multiple Kubernetes Clusters