adhit-r/fairmind

Security & Compliance Platform Enhancements

Open

#155 opened on Mar 21, 2026

View on GitHub
 (1 comment) (0 reactions) (0 assignees)Python (12 forks)auto 404
backendenhancementfrontendhelp wantedsecurity

Repository metrics

Stars
 (9 stars)
PR merge metrics
 (PR metrics pending)

Description

Description

Build out the security and compliance platform features — access control, evidence tracking, vendor risk, and third-party integrations.

Scope

  • Advanced access control & permissions (RBAC, team-based access)
  • Third-party compliance tool integrations (API connectors)
  • Vendor risk assessment & supply chain security scoring
  • Automated control assessment & testing engine
  • Attestation management & evidence tracking (extends existing EvidenceService)

Consolidates

#75, #77, #83, #89, #90

Contributor guide

Research direction
Start by exploring the existing codebase, focusing on the EvidenceService module. Read through its tests to understand current functionality. Then, research RBAC implementation patterns in Python. For vendor risk assessment, look into supply chain security standards like SLSA or OpenSSF Scorecard. Begin with a single API connector integration to understand the integration pattern.
Tech stack
python
Domain
securitybackend
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
4
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
Over 1 week
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
PythonGit
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
20