audit-labs/audit-labs.dev
The website for Audit Labs.
clone: git clone https://gitbay.org/audit-labs/audit-labs.dev.git
61bbed529decaa798fa50dee78dd5484b677d395
verified · cmc
author: Christian Cleberg <hello@cleberg.net> · 2026-08-07T02:13:47Z
assets/site.css | 1 + audit-report/index.html | 3 +-- control-coverage/index.html | 3 +-- evidence-seal/index.html | 3 +-- gh-attest/index.html | 13 ++++++++++++- index.html | 16 ++++++++++++++-- 6 files changed, 30 insertions(+), 9 deletions(-) @@ -178,6 +178,7 @@ footer { background: var(--black); color: var(--gray-4); padding: 3rem 2rem; } .footer-logo { font-family: 'IBM Plex Mono', monospace; font-weight: 700; font-size: 0.9rem; color: var(--gray-4); text-decoration: none; } .footer-logo span { color: var(--amber); } .footer-left p { font-size: 0.78rem; color: var(--gray-2); margin-top: 0.4rem; } +.footer-note { font-size: 0.7rem; color: var(--gray-3); max-width: 46ch; line-height: 1.5; } .footer-links { display: flex; gap: 1.5rem; align-items: center; flex-wrap: wrap; } .footer-links a { font-family: 'IBM Plex Mono', monospace; font-size: 0.75rem; color: var(--gray-3); text-decoration: none; transition: color 0.15s; } .footer-links a:hover { color: var(--off-white); } @@ -113,8 +113,7 @@ <div class="install-grid"> <div> <pre><span class="c"># Install from source</span> -pip install <span class="p">"audit-report"</span> \ - @ git+https://github.com/audit-labs/audit-report +pip install <span class="p">"audit-report @ git+https://github.com/audit-labs/audit-report"</span> <span class="c"># Report on an audit-tools package</span> audit-report ./output/aws_audit_prod_2026-08 \ @@ -113,8 +113,7 @@ <div class="install-grid"> <div> <pre><span class="c"># Install from source</span> -pip install <span class="p">"control-coverage"</span> \ - @ git+https://github.com/audit-labs/control-coverage +pip install <span class="p">"control-coverage @ git+https://github.com/audit-labs/control-coverage"</span> <span class="c"># Score a folder of audit-report JSON reports</span> control-coverage ./reports/ \ @@ -102,8 +102,7 @@ <div> <pre><span class="c"># Core is pure standard library.</span> <span class="c"># Extras add signing + timestamping:</span> -pip install <span class="p">"evidence-seal[sign,timestamp]"</span> \ - @ git+https://github.com/audit-labs/evidence-seal +pip install <span class="p">"evidence-seal[sign,timestamp] @ git+https://github.com/audit-labs/evidence-seal"</span> <span class="c"># Seal, then verify</span> evidence-seal seal ./evidence @@ -134,6 +134,15 @@ <a href="/audit-report/" style="color:var(--amber); text-decoration:none;">audit-report</a> turns offline evidence packages into the same control-mapped reports. </p> + <p class="lede" style="margin-top:.8rem; font-size:.9rem;"> + Rather not trust our tenant? + <a href="https://github.com/audit-labs/gh-attest#deployment" style="color:var(--amber); text-decoration:none;">Self-host it</a> + in your own Cloudflare account — it’s a single Worker with D1 and R2. + <a href="https://github.com/audit-labs/gh-attest/blob/main/PRIVACY.md" style="color:var(--amber); text-decoration:none;">Privacy</a> + and + <a href="https://github.com/audit-labs/gh-attest/blob/main/SECURITY.md" style="color:var(--amber); text-decoration:none;">security</a> + policies apply to the hosted instance. + </p> </div> </div> </div> @@ -143,11 +152,13 @@ <div class="footer-inner"> <div class="footer-left"> <a href="/" class="footer-logo">AUDIT<span>LABS</span></a> - <p>© 2026 Audit Labs — a two-person team building for the community.</p> + <p>© 2026 Audit Labs — an independent, open-source project built for the community.</p> </div> <div class="footer-links"> <a href="/">Home</a> <a href="https://github.com/audit-labs">GitHub</a> + <a href="https://github.com/audit-labs/gh-attest/blob/main/PRIVACY.md">Privacy</a> + <a href="https://github.com/audit-labs/gh-attest/blob/main/SECURITY.md">Security</a> </div> </div> </footer> @@ -171,6 +171,16 @@ <p>Step one of the pipeline — the collectors that pull raw evidence from the systems auditors most commonly deal with. New systems are added over time.</p> </div> <div class="tool-list"> + <div class="tool-item"> + <div class="tool-icon">[ AWS ]</div> + <h4>AWS</h4> + <p>IAM users, password policy, and public S3 buckets — the cloud identity and configuration evidence auditors ask for first.</p> + </div> + <div class="tool-item"> + <div class="tool-icon">[ GH ]</div> + <h4>GitHub</h4> + <p>Administrators, members, branch protection settings, and audit-log events — SDLC and change-management evidence.</p> + </div> <div class="tool-item"> <div class="tool-icon">[ DB ]</div> <h4>Databases</h4> @@ -207,7 +217,7 @@ <section class="frameworks"> <div class="frameworks-inner"> - <span class="frameworks-label">Used in assessments for</span> + <span class="frameworks-label">Built to produce evidence for</span> <div class="frameworks-list"> <span class="framework-tag">SOX</span> <span class="framework-tag">SOC 1 / 2</span> @@ -222,10 +232,12 @@ <div class="footer-inner"> <div class="footer-left"> <a href="/" class="footer-logo">AUDIT<span>LABS</span></a> - <p>© 2026 Audit Labs — a two-person team building for the community.</p> + <p>© 2026 Audit Labs — an independent, open-source project built for the community.</p> + <p class="footer-note">Not affiliated with, sponsored by, or endorsed by any employer, framework body (AICPA, ISO, NIST), or cloud provider. Framework mappings are our own interpretation.</p> </div> <div class="footer-links"> <a href="https://github.com/audit-labs">GitHub</a> + <a href="mailto:security@audit-labs.dev">Security</a> </div> </div> </footer>