aws-samples/spec-it-safe
v1.0.0MIT-0
Harden Kiro specs with security primitives before code is written. Analyzes EARS-format requirements, detects relevant CWE/OWASP weaknesses, and proposes traceable, testable security requirements.
harden-spec
Harden a Kiro spec's EARS requirements with security constraints derived from CWE/OWASP/CVE mappings. Use after functional requirements are finalized and before implementation planning, or whenever the user asks to security-review, harden, or shift-left a requirements/spec document.
security-primitives-reference
Reference knowledge for mapping requirements to CWE/OWASP weaknesses and the security primitives that close them. Use to explain why a hardening constraint was proposed, to justify EARS security requirements, or to harden a spec by hand when the SIS engine cannot run.