https://inspec.io, on github

InSpec is compliance as code.
Turn your compliance, security, and other policy requirements into automated tests.