audit-labs/audit-report

 1# Changelog
 2
 3All notable changes to this project are documented here. The format is based on
 4[Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres
 5to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 6
 7## [1.0.0] - 2026-08-07
 8
 9First stable release. The JSON report schema — findings carrying their `controls`
10and `pass` / `fail` / `not_applicable` status — is now a committed contract that
11[control-coverage](https://github.com/audit-labs/control-coverage) consumes
12directly; it will not change in a breaking way without a major-version bump.
13
14## [0.1.0] - 2026-08-06
15
16### Added
17
18- Control-mapped reports from an audit-tools evidence package: declarative YAML
19  rulesets map pass/fail results to SOC 2, ISO 27001, and NIST SP 800-53 controls.
20- Output as Markdown, self-contained HTML, or JSON; `--fail-on {low,medium,high,none}`
21  gate for CI.
22- Bundled rulesets for GitHub, GitLab, and AWS evidence.
23- Trend mode to diff two evidence packages.
24- Tool and ruleset provenance stamped into every report.
25- PyPI trusted-publishing release workflow.
26
27[1.0.0]: https://github.com/audit-labs/audit-report/releases/tag/v1.0.0
28[0.1.0]: https://github.com/audit-labs/audit-report/releases/tag/v0.1.0