C

cato

The driver. One tool that provisions the group, applies the NIST 800-53 framework, pushes control evidence, and exports OSCAL artifacts.

Landing page for the Evidence Factory group. Start here for the guided walk through the six projects.

Consumer workload: a reusable CI/CD Catalog component. Adoption phase enforce, so an off-catalog include is blocked.

Consumer workload: a container image. Adoption phase cutover, so the regulatory baseline blocks an unsigned image.

Consumer workload: a Go binary. Adoption phase report, so conformance runs advisory and merge requests stay green.

The policy plane. Pipeline Execution Policy, security policies, and external compliance controls that assess and gate every consumer.

The evidence line and the published CI/CD Catalog. Governed, reusable pipeline components every workload builds from.