-
Notifications
You must be signed in to change notification settings - Fork 0
Home
Welcome to the official SPARC wiki. SPARC is a Rails application for managing NIST 800-53 compliance documentation — System Security Plans (SSPs), Security Assessment Results (SARs), Component Definitions (CDEFs), Security Assessment Plans (SAPs), Plans of Action & Milestones (POA&Ms), and control catalogs. It replaces spreadsheet-based workflows with a web UI and REST API, with full OSCAL export support.
| Resource | Link |
|---|---|
| Repository | Rebel-Raiders/sparc |
| Releases | All releases |
| Issues | Open issues |
| Current Version | v3.4.0 |
29 roles aligned with NIST SP 800-37 Rev. 2 and OSCAL standards, 20 granular permission keys, instance vs. project scoping, and the Instance Admin bypass flag.
Complete inventory of every page in the application — Controls Layer, Implementation Layer, Assessment Layer, Project Management, Evidence, Admin, and API endpoints.
OSCAL import/export/validation, document processing pipeline, SSP wizard, control mapping, audit logging, heatmap analytics, and more.
Authentication providers (local, GitHub, GitLab, OIDC, LDAP), deployment patterns (Docker, AWS ECS Fargate, EC2, Azure), OSCAL ecosystem, and Active Storage.
OSCAL and NIST RMF terminology reference.
Release history from v2.0.0 through v3.4.0.
Domain model hierarchy, database schema, service layer, and background job architecture.
All SPARC_* environment variables for auth, database, OIDC, LDAP, SMTP, logging, and deployment.
| Component | Technology |
|---|---|
| Framework | Ruby 3.4.4, Rails 8.1.2 |
| Database | PostgreSQL 15 |
| Background Jobs | Sidekiq + Redis |
| Frontend | Hotwire (Turbo + Stimulus), Bootstrap 5.3 |
| Asset Pipeline | Propshaft, importmap (no Node build step) |
| Auth | OmniAuth (GitHub, GitLab, OIDC), net-ldap, bcrypt |
| OSCAL Validation | json_schemer (NIST OSCAL v1.1.2 schemas) |
| File Parsing | Roo (Excel), Nokogiri (XML) |
| Containerization | Docker, Docker Compose |
# Docker (recommended)
docker compose up --build
docker compose exec web bin/rails db:seed
# Local development
bundle install
bin/rails db:create db:migrate db:seed
bin/rails serverSee Configuration for all environment variables and Integrations for auth provider setup.
This wiki is version-controlled via its own git repository. To contribute:
git clone https://github.com/Rebel-Raiders/sparc.wiki.git
cd sparc.wiki
# Edit or add .md files
git add . && git commit -m "Update wiki"
git push origin masterAll pages use GitHub-flavored Markdown. Please include cross-references to issues, PRs, and commits where relevant.
Getting Started
User Guides
- User Guides (index)
- Getting Oriented
- Authorization Boundaries
- Control Catalogs & Baselines
- Converters & Imports
- System Security Plans (SSP)
- Component Definitions (CDEF)
- Security Assessment Plan (SAP)
- Security Assessment Results (SAR)
- POA&M
- Evidence & Attestations
- HDF Amendment Triage
- Compliance Library
- Security Keys & Smart Cards
- Administration
Documentation
- RBAC (Role-Based Access Control)
- Data Isolation
- Screens & UI
- Core Functions & Features
- Framework Mapping
- Integrations
- Architecture
- API Reference
Reference
Links