external compliance docs (#4045)

_data/not_edited_here.yaml

@@ -37,3 +37,7 @@ overrides:
 - path: /registry/spec/
   description: Docker Registry API references
   source: https://github.com/docker/distribution/tree/release/2.5/docs/spec/
+
+- path: /compliance/
+  description: Docker compliance
+  source: https://github.com/docker/compliance/tree/master/docs/compliance

_data/toc.yaml

@@ -406,6 +406,16 @@ guides:
     title: Seccomp security profiles for Docker
   - path: /engine/security/userns-remap/
     title: Isolate containers with a user namespace
+- sectiontitle: Standards and compliance
+  section:
+  - path: /compliance/
+    title: Docker standards and compliance
+  - path: /compliance/nist/800_53/
+    title: NIST 800-53
+  - path: /compliance/fedramp/
+    title: FedRAMP
+  - path: /compliance/cis/
+    title: CIS
 - sectiontitle: Extend Engine
   section:
   - path: /engine/extend/
@@ -510,6 +520,48 @@ reference:
 - title: Cloud stack file reference
   path: /docker-cloud/apps/stack-yaml-reference/
   nosync: true
+- sectiontitle: Compliance control reference
+  section:
+  - sectiontitle: NIST 800-53
+    section:
+    - path: /compliance/reference/800-53/
+      title: Overview
+    - path: /compliance/reference/800-53/ac/
+      title: Access control
+    - path: /compliance/reference/800-53/au/
+      title: Audit and accountability
+    - path: /compliance/reference/800-53/at/
+      title: Awareness and training
+    - path: /compliance/reference/800-53/cm/
+      title: Configuration management
+    - path: /compliance/reference/800-53/cp/
+      title: Contingency planning
+    - path: /compliance/reference/800-53/ia/
+      title: Identification and authentication
+    - path: /compliance/reference/800-53/ir/
+      title: Incident response
+    - path: /compliance/reference/800-53/ma/
+      title: Maintenance
+    - path: /compliance/reference/800-53/mp/
+      title: Media protection
+    - path: /compliance/reference/800-53/ps/
+      title: Personnel security
+    - path: /compliance/reference/800-53/pe/
+      title: Physical and environmental protection
+    - path: /compliance/reference/800-53/pl/
+      title: Planning
+    - path: /compliance/reference/800-53/pm/
+      title: Program management
+    - path: /compliance/reference/800-53/ra/
+      title: Risk assessment
+    - path: /compliance/reference/800-53/ca/
+      title: Security assessment and authorization
+    - path: /compliance/reference/800-53/sc/
+      title: System and communications protection
+    - path: /compliance/reference/800-53/si/
+      title: System and information integrity
+    - path: /compliance/reference/800-53/sa/
+      title: System and services acquisition
 - title: Compose file reference
   path: /compose/compose-file/
   nosync: true

_scripts/fetch-upstream-resources.sh

@@ -18,6 +18,7 @@ DISTRIBUTION_BRANCH="release/2.6"
 svn co https://github.com/docker/docker-ce/"$ENGINE_SVN_BRANCH"/components/cli/docs/extend md_source/engine/extend || (echo "Failed engine/extend download" && exit -1)
 svn co https://github.com/docker/docker-ce/"$ENGINE_SVN_BRANCH"/components/engine/docs/api md_source/engine/api || (echo "Failed engine/api download" && exit -1) # This will only get you the old API MD files 1.18 through 1.24
 svn co https://github.com/docker/distribution/"$DISTRIBUTION_SVN_BRANCH"/docs/spec md_source/registry/spec || (echo "Failed registry/spec download" && exit -1)
+svn co https://github.com/docker/compliance/trunk/docs/compliance md_source/compliance || (echo "Failed docker/compliance download" && exit -1)
 
 # Get the Library docs
 svn co https://github.com/docker-library/docs/trunk md_source/_samples/library || (echo "Failed library download" && exit -1)