Compliance control-ID mapping, cloudwright plan, GCP/Azure live import (v1.5.0)#65
Merged
Merged
Conversation
…ve import cloudwright compliance maps every design-stage finding to the specific framework control it violates (HIPAA/SOC2/PCI-DSS/FedRAMP/GDPR/ISO27001/ NIST), folding in a Checkov deep scan when available and degrading gracefully without it. cloudwright plan runs terraform validate/plan or pulumi preview against the exported artifact to prove it deploys. import-live now supports gcp and azure alongside aws. CLI, web API, and canvas panels for all three; version 1.5.0. Co-Authored-By: Xavier Puspus
Co-Authored-By: Xavier Puspus
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes three competitive-gap features from the May 2026 analysis.
1. Compliance scanner with framework control-ID mapping
cloudwright compliance spec.yaml --frameworks hipaa,soc2,fedrampmaps every design-stage finding to the exact control it violates (HIPAA 164.312(a)(2)(iv), SOC 2 CC6.1, FedRAMP SC-28, PCI-DSS, GDPR, ISO 27001, NIST 800-53) before any infrastructure exists. Runs on the built-in scanner with zero tooling; folds in a Checkov deep scan when the binary is present (explicit CKV map + keyword fallback).POST /api/compliance+ Compliance tab. Newcomplianceextra.2. cloudwright plan — prove it deploys
cloudwright plan spec.yaml --target terraform|pulumi-python|pulumi-tsruns terraform validate/plan or pulumi preview against the exported artifact, read-only. validate is the no-credential offline proof; plan adds a real resource diff with creds. Honest skip-reason classification.POST /api/plan+ Plan tab with DEPLOYABLE verdict.3. Live GCP + Azure import
import-live --provider gcp --project P(Compute Engine, Cloud Storage, Cloud SQL) and--provider azure --subscription S(VMs, Storage, SQL, AKS), mirroring the AWS importer. CLI routes gcp/azure instead of 'not yet implemented'.Verification
Version bumped 1.4.0 -> 1.5.0 across all 4 packages + extras pins.
Reviewed by Xavier Puspus