compliance-check

FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. License, copyright and export scanners are tools used in the workflow.

自媒体视频发布前违规风险审核。检查画面/声音/文字/封面/评论/带货信息/资质/引流，输出 Pass→Blocker 五级风险报告。覆盖抖音/小红书/视频号/B站/快手+千川低质素材。Claude Code、codex、workbuddy、hermes skill

A research of open source NAC solutions

dockerized-cloudsplot, CloudSploit is a security and configuration scanner that can detect hundreds of threats in your AWS account. Don't let a single misstep compromise your entire infrastructure.

Testbed - Under construction

🔒 CLI tool for analyzing website security headers. Checks 15+ security headers, provides detailed reports, and exports to TXT/JSON/CSV. Perfect for security audits and compliance checks.

💯🍵⚙️ Linter for security commit messages.

政府类项目技术标编制 AI 协作工作流 · 五阶段严格分阶段、每分评分项都追踪、Claude Code 深度协作契约

Engineering-grade Claude Skill for Chinese government tender writing — 5-stage auditable workflow with scoring matrix tracking

Generate a custom profile based on an existing STIG, and utilize STIG ecosystem for further scans.

REG-SEC-GPO is a Registry and GPO auditing and reporting PowerShell tool.

宣传物料合规审查技能包：广告法违禁词检测 + 字体版权比对，两条独立风险线

A Python tool that crawls websites and scans every accessible page for a custom list of keywords or phrases, then reports where and how often each one appears.

Declarative YAML config compliance checking across multi-environment deployments. Rules, diff detection, and whitelist-based governance in Go.

Perl scripts to find regex patterns in files (useful for compliance, audits and forensics).