{
  "schema": "compliance-crosswalk/v1",
  "tool": "credsweep",
  "frameworks": [
    {
      "id": "ISO27001",
      "name": "ISO/IEC 27001:2022",
      "controls": [
        { "ref": "A.5.15", "name": "Access control",                        "how": "Detects hard-coded credentials that bypass access control.", "coverage": "supports" },
        { "ref": "A.8.24", "name": "Use of cryptography",                   "how": "Detects committed private keys / secrets that should be vaulted.", "coverage": "supports" }
      ]
    },
    {
      "id": "PCI-DSS",
      "name": "PCI-DSS v4.0",
      "controls": [
        { "ref": "Req. 8.3.1", "name": "Strong authentication",            "how": "Detects credentials in source that undermine strong-auth requirements.", "coverage": "supports" }
      ]
    }
  ]
}