PyRank

Oscal Python Packages

Python packages with the GitHub topic oscal. Sorted by monthly downloads, with stars and forks.
oscal-compass
compliance-trestle

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

77K 284 110
dfkunstler
mcp-server-for-oscal

OSCAL tools for AI agents

3K 0 0
polycentric-labs
evidentia-collectors

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

2K 8 1
polycentric-labs
evidentia-core

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

2K 8 1
polycentric-labs
evidentia-integrations

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

2K 8 1
polycentric-labs
evidentia-ai

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

2K 8 1
polycentric-labs
evidentia-api

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

2K 8 1
polycentric-labs
evidentia

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

2K 8 1
oscal-compass
compliance-trestle-fedramp

Compliance trestle plugin to support FedRAMP specific functionality.

2K 3 3
polycentric-labs
evidentia-mcp

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

1K 8 1
SamuelBlickle
grundschutz-mcp

MCP server that makes the BSI IT-Grundschutz++ compendium queryable for AI agents and ISMS tooling.

1K 3 0
immu4989
dspy-security-bench

Open, privacy-bounded assurance for AI agents: containment provenance, identity passports, authorization twins, OTel evidence, CI gates, and OSCAL.

1K 7 0
polycentric-labs
evidentia-eval

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

797 8 1
Venturalitica
venturalitica

Frictionless Governance for AI

477 6 3
allenfbyrd
controlbridge

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

396 8 1
allenfbyrd
controlbridge-core

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

345 8 1
allenfbyrd
controlbridge-integrations

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

335 8 1
allenfbyrd
controlbridge-collectors

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

333 8 1
allenfbyrd
controlbridge-ai

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

319 8 1
allenfbyrd
controlbridge-api

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

154 8 1
Polycentric-Labs
regrails

Policy-as-code for FERPA + Title IV: a deterministic guardrail that decides before any LLM speaks. Risk-tiered, citation-faithful, with an MCP server, OSCAL/SARIF exports, a GitHub Action, and a live web demo.

122 1 0