ComplianceBot Change Risk Analyzer

Version updated for https://github.com/abishekgiri/change-risk-predictor- to version v1.0.0.

  • This action is used across all versions by ? repositories.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

ComplianceBot is a GitHub Action designed for deterministic enforcement of security and compliance policies (e.g., SOC 2, ISO 27001, HIPAA) and operational change-risk analysis across pull requests. It automates predictable, transparent decision-making and generates immutable audit evidence to support regulated environments, external audits, and high-risk systems. Its key capabilities include policy-as-code enforcement, full traceability, and the use of AI as a non-enforcing assistant for explanations and remediation suggestions.

Release notes

ComplianceBot v1.0.0

Initial production release of ComplianceBot with secure packaging and CI enforcement.

Highlights

  • Dockerized ComplianceBot CLI (python:3.10-slim)
  • Runs as non-root user (UID 1000) for security compliance
  • GitHub Action for pull request risk and compliance analysis
  • Supports report-only and blocking enforcement modes
  • Deterministic exit codes for branch protection rules
  • Writes auditable evidence bundles to the repository workspace

Use cases

  • Enforce code and compliance policies in pull requests
  • Block risky or non-compliant changes before merge
  • Generate auditable artifacts for SOC2 / ISO workflows

Status

  • Stable v1.0.0 release
  • Ready for GitHub Marketplace publication