Open ecosystem

Components for
Evidence Packs

Collectors gather evidence from external systems. Tools analyze and transform packs. Mix and match to build your workflow.

brew install locktivity/tap/epack
Get Started
Open source
Sigstore signed
No lock-in

Four types of components

Evidence Packs are just ZIP files with a manifest. Components extend what you can do with them.

Collectors

Gather evidence from external APIs. Each collector handles authentication, pagination, and data normalization.

epack collect github

Tools

Perform compliance analysis. Run policy checks, map to frameworks, score risk, generate timelines.

epack tool policy check

Utilities

Helper tools for working with packs. Browse contents, compare changes over time, export to various formats.

epack utility viewer

Remotes

Publish and retrieve packs from external storage. Each remote handles authentication and transfers.

epack push locktivity

Build your own components

Components follow a simple protocol. Write collectors and tools in any language.