code for parsing SSPs?

[afeld]

I'm looking around for open source code that parses SSPs / control information in various formats, regardless of what they do with those once parsed. Running list:

Tool	Language	Parses	Notes
FedRAMP Templater	Go	FedRAMP .docx
SSP Parse Prototype	Python	FedRAMP .docx
Compliance Masonry	Go	OpenControl
oscalkit	Go	OSCAL
hyperGRC (code)	Python	OpenControl	GPL-licensed
compliancelib-python	Python	OpenControl	GPL-licensed
pyopencontrol	Python	OpenControl
OpenControl Linter	Ruby	OpenControl
python-ssp	Python	FedRAMP .docx

What else is out there? cc

• OSCAL tools
• public SSPs? #68

[alisabryant]

o0o0; cool information gathering!

I suggest we...
1.) create a topic tag on GitHub repos so that we can easily find tools like these in a search
2.) Create a tools section on the https://open-control.org/ website
3.) Explore what parsers exist for OSCAL

[openprivacy]

Tool	Language	Parses	Notes
SSP Toolkit	Python	OpenControl*	GPL licensed

[isimluk]

Hello, I am trying to build data converter opencontrol <---> OSCAL SSP <---> fedramp docx.

Tool	Language	Parses	Notes
GoComply/Fedramp	Go	OpenControl, OSCAL	Unlicense

Also, I did revamped docker's oscalkit to the latest greatest upstream OSCAL. Working on the assessment layer now.

Tool	Language	Parses	Notes
GoComply/oscalkit	Go	OSCAL