OSCAL Lula

Experiments using OSCAL and Lula for continuous compliance testing.

Generate findings

prowler aws --compliance nist_800_53_revision_5_aws -f ca-central-1 us-east-1

Add component

lula generate component \
    --catalog-source https://raw.githubusercontent.com/usnistgov/oscal-content/refs/heads/main/nist.gov/SP800-53/rev5/yaml/NIST_SP-800-53_rev5_catalog.yaml \
    --component "superset" \
    --requirements "ac-3,ac-4" \
    --output-file oscal.yaml

Run validations

lula validate -f oscal-superset.yaml