[Verse 1]
When STIG and OSCAL worlds collide
You need a bridge to cross the divide
ComplianceAsCode leads the way
From single source to dual display
SCAP data streams and component definitions too
Same content base, two formats shining through
[Chorus]
Four tools that bridge, four tools that bind
STIG to OSCAL, peace of mind
ComplianceAsCode, Trestle, RegScale, OpenRMF
Building bridges, that's enough
Convert and manage, scan and export
Bridging worlds with strong support
[Verse 2]
IBM Trestle takes the stage
Converting STIG to OSCAL page
Pipeline management, CI CD flow
OSCAL artifacts wherever you go
From legacy checklists to modern frames
Trestle transforms the compliance games
[Chorus]
Four tools that bridge, four tools that bind
STIG to OSCAL, peace of mind
ComplianceAsCode, Trestle, RegScale, OpenRMF
Building bridges, that's enough
Convert and manage, scan and export
Bridging worlds with strong support
[Verse 3]
RegScale ingests those SCAP results
Transforms the data, no defaults
OSCAL formatted documentation
Automated compliance generation
Scan results flowing, reports refined
Bridging gaps by design
[Bridge]
OpenRMF manages every checklist
STIG workflows you cannot miss
Export to formats OSCAL can consume
Breaking down that legacy gloom
Four solutions, one shared goal
Making compliance systems whole
[Chorus]
Four tools that bridge, four tools that bind
STIG to OSCAL, peace of mind
ComplianceAsCode, Trestle, RegScale, OpenRMF
Building bridges, that's enough
Convert and manage, scan and export
Bridging worlds with strong support
[Outro]
From STIG checklists to OSCAL dreams
These bridges connect your compliance schemes
Four tools working, hand in hand
Bridging worlds across the land