Rip out compensating-controls framework #359

Merged
eblume merged 2 commits from rip-out-compensating-controls into main 2026-05-22 21:08:55 -07:00

2 commits

Author SHA1 Message Date
3e2c481034 C1: drop CC: prefixes from mutelist entries; remove CC tooling
Strips the "CC: <id>." prefix from every Description field in the
Prowler mutelist YAML files (and the statement field in trivyignore).
Each entry's free-form description now stands on its own.

Deletes compensating-controls.yaml (the CC registry) and the
review-compensating-controls mise task. Updates
review-compliance-reports to drop CC references from docstrings,
panel text, and table titles. Node verification logic is unchanged.
2026-05-22 20:09:39 -07:00
69737dc915 C1: docs-first removal of compensating-controls framework
Deletes the CC how-to and explanation docs, and the orphan changelog
fragments describing CC reviews. Updates security.md and
read-compliance-reports.md to describe muting in terms of the mutelist
files only. Adds the branch changelog fragment.

Mutelist YAML files, the Prowler CronJobs, and the
review-compliance-reports task all stay — they're updated in the next
commit.
2026-05-22 20:09:28 -07:00