Skip to content

florianbuetow/iso27001-sdlc

v1.0.1MIT

Scan a software repository for ISO 27001:2022 compliance of its software development controls (Annex A 8.4, 8.25–8.33). Produces a per-control compliance gap report covering source code access, secure SDLC, application security requirements, secure architecture, secure coding, security testing, outsourced development, environment separation, change management, and test data.

scripts

  • iso27001-sdlc
  • scripts/scan_repo.py
  • scripts/secure_coding_scanner.py
plugin.json
name
iso27001-sdlc
version
1.0.1
description
Scan a software repository for ISO 27001:2022 compliance of its software development controls (Annex A 8.4, 8.25–8.33). Produces a per-control compliance gap report covering source code access, secure SDLC, application security requirements, secure architecture, secure coding, security testing, outsourced development, environment separation, change management, and test data.
author
Florian Buetow2320560+florianbuetow@users.noreply.github.com
license
MIT
extensions
com.openai

What else this package ships

These files come with the package and this site does not publish them. They are listed so you know what is there before you install it.

  • 2Python files
  • LICENSE
View on GitHub

Client extensions

Data this package carries for particular clients. The directory lists the clients named and never reads what is addressed to them.

  • com.openai