ComplianceAsCode
Official@complianceascode
Offers standardized security rule generation, control mapping, and validation frameworks for enterprise regulatory compliance and infrastructure hardening.
Agent Skills by ComplianceAsCode
Showing 15 vetted skills indexed across 1 GitHub repositories.
ComplianceAsCodecreate-product
Creates a buildable product skeleton in the ComplianceAsCode security content project.
ComplianceAsCoderesolve-rule-variables
Resolves XCCDF variable selections for compliance rules into var_name=key entries.
ComplianceAsCodecreate-template
Creates ComplianceAsCode templates that generate OVAL checks and Bash or Ansible remediations.
ComplianceAsCodeassess-nist-control
Assess NIST 800-53 controls and map compliance rules using OSCAL and CIS data.
ComplianceAsCodemanage-profile
Creates and updates versioned compliance profile pairs for ComplianceAsCode products.
ComplianceAsCodecreate-test-scenarios
Create Automatus test scenarios for ComplianceAsCode security rules.
ComplianceAsCodemap-controls
Automate mapping of security controls to candidate rules across frameworks.
ComplianceAsCodebuild-product
Orchestrate ComplianceAsCode product builds with MCP tools and filesystem fallbacks.
ComplianceAsCodedraft-pr
Generate pull request descriptions from branch commits and PR templates.
ComplianceAsCodetest-rule
Validate ComplianceAsCode security rules with Automatus and virsh.
ComplianceAsCodeonboard-control
Parse security policy PDFs, Markdown, HTML, or text into a ComplianceAsCode control file structure.
ComplianceAsCodecreate-rule
Generate ComplianceAsCode security rule scaffolds with rule.yml, tests, and references.
ComplianceAsCodeinspect-control
Analyze a control file to report requirement stats and mapping status.
ComplianceAsCodemap-requirement
Identify candidate rules for control requirements using cross-framework mappings.
ComplianceAsCoderun-tests
Run ctest validation suites on built content under build/.
Frequently Asked Questions About ComplianceAsCode
FAQPage SchemaWhat specific security tasks does ComplianceAsCode enable?▼
ComplianceAsCode enables the parsing of security policy documents into structured control files, the generation of rule scaffolds, and the mapping of security controls to candidate rules. It further supports the validation of these rules through integrated testing suites to ensure adherence to regulatory frameworks.
Which engineering personas benefit from these capabilities?▼
Security engineers, compliance officers, and infrastructure administrators benefit from these capabilities. These professionals use the system to translate complex regulatory requirements into machine-readable security rules, ensuring consistent policy enforcement across enterprise environments while reducing manual documentation and mapping overhead.
What are the primary prerequisites for running these validation suites?▼
Execution requires a configured environment capable of running ctest validation suites and managing virtualized instances via virsh. Users must also maintain a structured repository containing rule.yml files and associated test definitions to facilitate the build and validation processes for security content.