Catalog

Every released plugin of the Continuous Compliance Framework (CCF), with its newest release and the policy bundles that work with it. Open a plugin for its configuration, the evidence it collects and its policies catalog, in each of its version lines.

Plugin	Latest version	Policy bundles	Description
APT Versions `plugin-apt-versions`	`v0.7.0`	None mapped yet
AWS ACM `plugin-aws-acm`	`v0.1.1`	`plugin-aws-acm-certificate-policies` `v0.1.1`	A CCF compliance plugin for AWS Certificate Manager (ACM). Fetches certificate data from ACM and evaluates OPA Rego policies to produce Evidence for the CCF API.
AWS API Gateway `plugin-aws-apigateway`	`v0.1.0`	None mapped yet	AWS API Gateway compliance plugin for the Continuous Compliance Framework
AWS CloudFront `plugin-aws-cloudfront`	`v0.1.0`	None mapped yet	AWS CloudFront compliance plugin for the Continuous Compliance Framework
AWS EC2 `plugin-aws-ec2`	`v0.4.1`	`plugin-aws-ec2-policies` `v0.4.0`	This plugin collects read-only AWS EC2, EBS, snapshot, and recovery metadata, evaluates CCF Rego policy bundles, and emits evidence back through the CCF agent.
AWS ECR `plugin-aws-ecr`	`v0.1.1`	`plugin-aws-ecr-image-policies` `v0.1.0` `plugin-aws-ecr-registry-policies` `v0.1.0` `plugin-aws-ecr-repository-policies` `v0.1.0`	CCF compliance plugin for AWS Elastic Container Registry (ECR). Evaluates private ECR repositories and container image scan results against SOC2 TSC 2017 controls.
AWS EKS `plugin-aws-eks`	`v0.1.2`	`plugin-aws-eks-addon-policies` `v0.1.0` `plugin-aws-eks-nodegroup-policies` `v0.1.0` `plugin-aws-eks-policies` `v0.1.0`	This plugin collects read-only Amazon EKS data, evaluates CCF Rego policy bundles, and emits evidence back through the CCF agent.
AWS ELB `plugin-aws-elb`	`v0.1.1`	None mapped yet	This plugin collects read-only AWS Elastic Load Balancing v2 evidence and evaluates CCF Rego policy bundles against one normalized input document per ELBv2 resource.
AWS RDS Aurora PostgreSQL `plugin-aws-rds-aurora-psql`	`v0.3.2`	None mapped yet	This plugin collects read-only evidence for Amazon RDS instances, Amazon Aurora clusters, and RDS snapshots, then evaluates configured CCF/Rego policy bundles against a normalized per-resource input document.
AWS S3 `plugin-aws-s3`	`v0.1.1`	`plugin-aws-s3-policies` `v0.1.0`	This plugin collects read-only Amazon S3 bucket configuration, evaluates CCF Rego policy bundles, and emits evidence back through the CCF agent.
AWS Secrets Manager `plugin-aws-secretsmanager`	`v0.1.2`	`plugin-aws-secretsmanager-policies` `v0.1.1`	This repository builds a CCF RunnerV2 plugin for AWS Secrets Manager. It collects read-only Secrets Manager metadata, resource policies, version stages, tags, and CloudTrail event history, then evaluates configured Rego policy bundles against one normalized record per secret ARN.
AWS VPC `plugin-aws-vpc`	`v0.3.1`	`plugin-aws-vpc-nacl-policies` `v0.1.0` `plugin-aws-vpc-policies` `v0.1.0` `plugin-aws-vpc-rt-policies` `v0.1.0` `plugin-aws-vpc-sg-policies` `v0.3.0` `plugin-aws-vpc-subnet-policies` `v0.1.0`	This plugin collects read-only AWS VPC networking data from EC2 and CloudWatch Logs, evaluates CCF Rego policy bundles, and emits evidence back through the CCF agent.
Cloud Custodian `plugin-cloud-custodian`	`v0.3.0`	`plugin-cloud-custodian-policies` `v0.2.2`	The Cloud Custodian Plugin runs Cloud Custodian policies in dry-run mode, builds a full inventory baseline for each configured resource type, converts each resource/policy pair into a standardized per-resource payload, and then executes CCF OPA bundles against those payloads to generate evidence.
Dependabot `plugin-dependabot`	`v0.8.0`	`plugin-dependabot-granular-policies` `v0.2.0`	Fetches dependabot alerts for GitHub repositories, and passes them through the CCF policy engine.
File Attestation `plugin-file-attestation`	`v0.2.1`	`plugin-file-attestation-ctrf-policies` `v0.2.0` `plugin-file-attestation-policies` `v0.2.0` `plugin-file-attestation-sarif-policies` `v0.2.0`	Plugin to check for file existence and optionally its attestation
GitHub Repositories `plugin-github-repositories`	`v0.10.0`	`plugin-github-repositories-custom-policies` `v0.2.0` `plugin-github-repositories-dependency-policies` `v0.1.1` `plugin-github-repositories-policies` `v0.7.3` `plugin-github-repositories-pr-policies` `v0.2.0`	Github Repository Plugin for the CCF Agent
GitHub Settings `plugin-github-settings`	`v0.6.0`	`plugin-github-settings-policies` `v0.4.1`	Checks compliance of Github settings of organisations & repositories
GitLab Repositories `plugin-gitlab-repositories`	`v0.1.1`	`plugin-gitlab-repositories-policies` `v0.1.0`	Fetches information regarding GitLab repositories, including
HTTP Collector `plugin-http-collector`	`v0.2.0`	`plugin-http-collector-policies` `v0.2.0`	Compliance Framework HTTP Collector Plugin - Fetches and validates HTTP configurations
Intruder `plugin-intruder`	`v0.2.0`	`plugin-intruder-policies` `v0.1.0`	Fetches information regarding issues raised via intruder.io
Jira `plugin-jira`	`v0.2.3`	`plugin-jira-custom-policies` `v0.2.0`	Gathers data from Jira / JSM in order to calculate policies
Kubernetes `plugin-k8s`	`v0.2.1`	`plugin-k8s-opres-policies` `v0.2.0`	A Continuous Compliance Framework plugin that collects Kubernetes resources and evaluates OPA/Rego policies against them.
Local SSH `plugin-local-ssh`	`v0.5.0`	`plugin-local-ssh-policies` `v0.3.1`	Local SSH plugin for continuous compliance
Mock Plugin 1 `mock-plugin-1`	`v0.1.5`	`mock-plugin-policies-1` `v0.1.1`	Mock content for the CCF Factory's tests: a placeholder plugin that documents no real software.
Mock Plugin 2 `mock-plugin-2`	`v0.1.4`	`mock-plugin-policies-2` `v0.1.0`	Mock content for the CCF Factory's tests: a placeholder plugin that documents no real software.