Registry / devops / compliance-trestle

compliance-trestle

library4.0.2pypypi✓ verified 82d ago

Compliance Trestle (v4.0.2) is a tool for managing and automating Python objects representing OSCAL (Open Security Controls Assessment Language) layers and models. It enables validation, transformation, and generation of OSCAL documents (SSP, SAP, SAR, etc.). Release cadence is approximately quarterly. Requires Python >= 3.10.

devops auth-security workflow data serialization

pip install compliance-trestle

github ↗package ↗homepage ↗docs ↗

INSTALL

IMPORT

SIG · COMPLIANCE-TRESTLE

compliance-trestle

devopspythonv4.0.2

harness data pending

Install & Compatibility

Where this runs

No compatibility data collected yet for this library.

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

Trestle

✓ import trestle

✗ from trestle.core.trestle import Trestle

Basic usage: initialize trestle and validate a catalog file. Note: Trestle is primarily CLI-driven; Python API is evolving.

from trestle.core.trestle import Trestle from trestle.common import const import os # Initialize trestle workspace (if not already) # Trestle workspace is usually initialized via CLI: trestle init # For programmatic use, ensure environment variables or config are set. # Example: validate a catalog file catalog_path = 'catalog.json' if os.path.exists(catalog_path): # Validate via CLI as programmatic validation is in development print('Catalog file exists. Use trestle validate -t catalog <file>') else: print('Sample catalog not present. Run trestle init to start.')

trestle --version

Debug

Known issues

breakingIn v4.0.0, the Python package structure changed from 'compliance_trestle' (underscore) to 'trestle' (no prefix). Old imports like 'from compliance_trestle import ...' will break.

fix

Replace 'compliance_trestle' with 'trestle' in all imports. E.g., 'from trestle.common.file_utils import ...' instead of 'from compliance_trestle.common.file_utils import ...'.

affects: 3.x -> 4.0.0+

breakingPython 3.8 and 3.9 support dropped in v4.0.0. Only Python >= 3.10 is supported.

fix

Upgrade Python to 3.10 or higher.

affects: 4.0.0+

gotchaThe trestle CLI is the primary interface. The Python API is not fully stable; many operations are only exposed via CLI subcommands (e.g., trestle init, trestle create, trestle split).

fix

Prefer using CLI commands via subprocess (subprocess.run(['trestle', 'init', ...])) or use the trestle CLI programmatically through 'trestle.cli.run'. See docs for CLI commands.

affects: all

Upgrade

Version history

4.0.2latest on PyPI · released Apr 17, 2026

Audit

Dependencies

No dependency data recorded yet.

Agent activity

21 hits · last 30 days

node

OpenAI (training)

Amazon

Resources

githubhttps://github.com/oscal-compass/compliance-trestle ↗

packagehttps://pypi.org/project/compliance-trestle/ ↗

homepagehttps://oscal-compass.github.io/compliance-trestle ↗

docshttps://oscal-compass.github.io/compliance-trestle ↗