Skip to content

Releases: Mihirajmera/aws-compliance-as-code

Release list

v1.1.0

v1.1.0 Latest
Latest

Choose a tag to compare

View all tags
@Mihirajmera Mihirajmera released this 22 Oct 00:04
v1.1.0
f6544b8
  • Installable package with an aws-compliance-as-code command (scan, oscal, demo), published to PyPI with trusted publishing and SLSA provenance. run.py and oscal_export.py still work from a clone.
  • demo runs every check against a deliberately misconfigured fake account (moto) and writes hashed evidence, OSCAL and a report; sample-output/ is the committed result and CI checks it.
  • OSCAL output is reproducible: deterministic UUIDs, SOURCE_DATE_EPOCH for timestamps, evidence links relative to the output folder.

Install: pip install aws-compliance-as-code==1.1.0 (add [demo] for the fake-account demo)

Artifacts carry SLSA build provenance; the PyPI upload uses trusted publishing.

Assets 5
Loading

v1.0.0

v1.0.0

Choose a tag to compare

View all tags
@Mihirajmera Mihirajmera released this 17 Oct 15:56
v1.0.0
f06ed43

First tagged release. Read-only AWS control checks mapped to NIST 800-53, SOC 2, ISO 27001 and CIS, with SHA-256-hashed evidence and OSCAL 1.1.2 export.

  • CI on Python 3.11 / current Terraform tooling with every GitHub Action pinned to a commit SHA
  • Dependencies pinned by version and hash (requirements.in → requirements.txt)
  • CodeQL, OpenSSF Scorecard and Dependabot
  • Security policy with private vulnerability reporting
Loading