https://github.com/flobehejohn/doctrine-lab
Open-source local-first kit for reproducible audit evidence, DREPS evidence packs, public scoring, reports, static site and multi-forge publication.
https://github.com/flobehejohn/doctrine-lab
audit ci-cd devops dreps evidence forgejo gitlab-ci open-source platform-engineering reproducibility static-site supply-chain technical-debt
Last synced: 1 day ago
JSON representation
Open-source local-first kit for reproducible audit evidence, DREPS evidence packs, public scoring, reports, static site and multi-forge publication.
- Host: GitHub
- URL: https://github.com/flobehejohn/doctrine-lab
- Owner: flobehejohn
- License: other
- Created: 2026-06-15T15:23:31.000Z (1 day ago)
- Default Branch: main
- Last Pushed: 2026-06-15T16:53:28.000Z (1 day ago)
- Last Synced: 2026-06-15T18:06:52.840Z (1 day ago)
- Topics: audit, ci-cd, devops, dreps, evidence, forgejo, gitlab-ci, open-source, platform-engineering, reproducibility, static-site, supply-chain, technical-debt
- Language: JavaScript
- Homepage: https://flobehejohn.github.io/doctrine-lab/
- Size: 146 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Citation: CITATION.cff
- Codeowners: .github/CODEOWNERS
- Security: SECURITY.md
- Support: SUPPORT.md
- Governance: GOVERNANCE.md
- Zenodo: .zenodo.json
Awesome Lists containing this project
README
# Doctrine Lab
Doctrine Lab est un template open source pour créer des laboratoires locaux, pédagogiques et reproductibles autour de la preuve d'audit.
## Objectif
Le projet sert à apprendre, tester et documenter une logique d'audit reproductible sans dépendre d'une plateforme propriétaire.
Il produit un premier format DREPS minimal :
- artefacts déclarés ;
- empreintes SHA-256 ;
- événements runtime ;
- findings ;
- mappings de contrôles ;
- validation locale.
## Démarrage rapide
Commandes :
node scripts/dreps/export-dreps.mjs
node scripts/dreps/validate-dreps.mjs
## Licence
Politique recommandée :
- Code : Apache-2.0
- Documentation : CC-BY-4.0
- Exemples : CC0-1.0
## Frontière open source / premium
Doctrine Lab est la couche libre, pédagogique et reproductible.
Doctrine Platform reste la couche professionnelle pour :
- audit réglementaire ;
- scoring avancé ;
- gouvernance entreprise ;
- signature et packaging probatoire ;
- dashboards multi-labs ;
- accompagnement expert.
## Sécurité
Doctrine Lab est prévu pour des labs locaux, contrôlés et pédagogiques.
Aucun scan externe, aucune exploitation de tiers, aucune collecte cachée et aucune télémétrie silencieuse ne doivent être introduits.
## Doctrine Lab Open Toolbox
Doctrine Lab includes a generous open toolbox for users who want to start from another language, workflow, or project style.
Read:
- docs/TOOLBOX_OVERVIEW.md
- toolboxes/README.md
- toolboxes/packs/
- toolboxes/languages/
The toolbox includes examples for Python, JavaScript, HTML, Processing, Java, .NET, PowerShell, Bash, Go, Rust, PHP and Ruby.
All examples are local-only, educational and safe by default.
They do not provide Doctrine Platform certification, premium scoring or enterprise governance.
## Toolbox deep documentation
The Open Toolbox is documented as a complete open source learning and starting kit.
Read:
- docs/TOOLBOX_DEEP_DIVE.md
- docs/TOOLBOX_COMPOSITION_GUIDE.md
- docs/TOOLBOX_BOUNDARIES.md
- docs/TOOLBOX_USE_CASES.md
- docs/TOOLBOX_LANGUAGE_ADAPTERS.md
- docs/TOOLBOX_FOR_TRAINERS.md
- docs/TOOLBOX_FOR_DEVOPS.md
- docs/TOOLBOX_FOR_DEVELOPERS.md
The toolbox is generous by design, but remains local-only and does not include Doctrine Platform premium certification, signing, history, advanced scoring or enterprise governance.