Technical Audit Platform
EVIDENCE-00EVIDENCE LABLOCAL PARSE / NO UPLOAD
Normalize technical outputs into one evidence spine.
Drop security scans, SBOMs, dependency-update reports, repository churn, cost evidence or test coverage reports. Files are parsed locally, normalized into the AC evidence schema, hashed as RAW + NORMALIZED SHA-256 and can be saved into the audit session.
INPUT / NORMALIZE / SHA-256
MAX 10 MBOpenSSF ScorecardSUPPORTED
scorecard --repo=github.com/ORG/REPO --format=json > scorecard.jsonOSV-ScannerSUPPORTED
osv-scanner scan --format json . > osv.jsonSARIF 2.1.0SUPPORTED
Upload a .sarif/.json result from your static-analysis or security toolInfracostSUPPORTED
infracost scan --json > infracost.jsonCycloneDX SBOMSUPPORTED
Upload a CycloneDX JSON SBOMSPDX SBOMSUPPORTED
Upload an SPDX JSON SBOMnpm outdatedSUPPORTED
npm outdated --json > npm-outdated.jsonLCOVSUPPORTED
lcov --capture --directory . --output-file coverage.infoCobertura XMLSUPPORTED
Upload a Cobertura coverage.xml reportGit churn hotspotsSUPPORTED
git log --since="90 days ago" --numstat --format="@@COMMIT@@ %H %aI" -- . > git-churn.txt