Trestle Compliance Collab Platform OS Project + NIST Compliance as Code OSCAL Standard
summary
Trestle is an open source tool that implements NIST OSCAL and automates continuous compliance: Excel CIS benchmarks convert to OSCAL JSON and human-editable Markdown, changes generate pull requests, and comments drive automatic semantic versioning (example: 0.2.0 → 0.2.1) plus changelogs. Dependent profiles and component definitions update automatically, spreadsheet mappings link CIS controls to policy/rule code, and the workflow produces an editable System Security Plan. Code and docs live on IBM’s GitHub.
AI-written summary · about
related talks
40mAutomating Security and Compliance via a new standard-of-standards
37mPath To Production: Sustainable Compliance In Strict Environments
07mZero Trust Visualization
29mZero Trust Maturity Assessment With OSCAL
22mOSCAL in Action: Real World Examples of Automating Policy & Comp...
27mContinuous Compliance: Agile Practices for Software Compliance
28mSimplifying Global Compliance for CNCF Projects With the OpenSSF OSPS Baseline
35mOSCAR - Automate software analysis, compliance and security