Owner

ComplianceAsCode

14 indexed repositories · View on GitHub

content
Security automation content in SCAP, Bash, Ansible, and other formats

Shell · 2804 stars
auditree-framework
The Auditree framework tool to run compliance control checks as unit tests.

Python · 76 stars
ComplianceAsCode.github.io
A ComplianceAsCode blog

CSS · 31 stars
auditree-arboretum
The Auditree common fetchers, checks and harvest reports library.

Python · 22 stars
auditree-harvest
The Auditree data gathering and reporting tool.

Python · 17 stars
auditree-plant
The Auditree tool for adding external evidence.

Python · 13 stars
auditree-prune
The Auditree evidence removal tool.

Python · 10 stars
content-test-filtering
System for Automatic Filtering of Tests for ComplianceAsCode project

Python · 8 stars
oscal-content
An OSCAL content repository with test data for ComplyTime.

Shell · 7 stars
cvetool
Next Gen CVE scanning for Fedora-based distros.

Go · 7 stars
ocp-oscal-catalogs

Shell · 4 stars
compliance-sdk

Go · 4 stars
ocp-oscal-cd

Python · 2 stars
ocp4e2e
E2E tests for verifying the Compliance Operator against ComplianceAsCode/content

Go · 2 stars

Open All

252 open issues indexed

openshift console timeouts Open

Ansible Bash OpenShift OVAL standards

ComplianceAsCode/content#3668 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Variables from OCIL defined in rule.yml are not being expanded Open

Infrastructure OCIL RHEL triaged

ComplianceAsCode/content#4354 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
False positive in api_server_admission_control_plugin for OpenShift Open

OpenShift OVAL

ComplianceAsCode/content#4355 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
AIDE periodic crontab remediation Open

triaged

ComplianceAsCode/content#4825 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Some rules in PCI-DSS profile are missing OCIL (RHEL8) Open

good first issue OCIL pci-dss RHEL triaged

ComplianceAsCode/content#4913 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Templates mount_option_remote_filesystems and mount_option_removable_partitions have weird keys Open

triaged

ComplianceAsCode/content#4914 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
configure_tmux_lock_after_time needs time variable Open

enhancement triaged

ComplianceAsCode/content#4965 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Should root and 'admin' password be expired during kickstart? Open

enhancement triaged

ComplianceAsCode/content#5159 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
dnf-automatic provides multiple timers Open

OVAL triaged

ComplianceAsCode/content#5180 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Audit entry "-e 2" is not guaranteed to be the last audit rule in audit.rule Open

triaged

ComplianceAsCode/content#5769 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Compare ds tool may produce useless information when comparing ansible remediation Open

Ansible enhancement help-wanted triaged usability

ComplianceAsCode/content#6339 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
implement section 5 rules of CIS Benchmark for OpenShift with "count" function Open

CIS OpenShift

ComplianceAsCode/content#6529 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Rule mount_option_boot_noauto breaks checking of other mount options in /boot Open

triaged

ComplianceAsCode/content#6571 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
test_aide_periodic_cron_checking is too restrictive Open

triaged

ComplianceAsCode/content#6739 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
RHEL7 and RHEL8 CUI rules - missing references Open

CUI RHEL7 RHEL8 triaged

ComplianceAsCode/content#6843 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
configure_gnutls_tls_crypto_policy should be less strict in the order it checks the algorithms Open

RHEL triaged

ComplianceAsCode/content#7279 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[feature request] Annotate task names with (tag) identifiers Open

Ansible New Feature triaged

ComplianceAsCode/content#7418 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Bash and Ansible remediation of selinux_state are misaligned Open

Ansible Bash good first issue triaged

ComplianceAsCode/content#7461 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
xccdf_org.ssgproject.content_value_var_multiple_time_servers unused Open

triaged

ComplianceAsCode/content#7844 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
ocp4-api-server-no-adm-ctrl-plugins-disabled incorrectly failing on okd 4.9 Open

OpenShift

ComplianceAsCode/content#8085 · 5 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Kubernetes content is specific to OpenShift Open

OpenShift

ComplianceAsCode/content#8198 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
rhcos4 OVAL for sysctl_crypto_fips_enabled doesn't match rule id Open

OpenShift

ComplianceAsCode/content#8289 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
check for makeIPTablesUtilChains does not reflect benchmark and product description Open

Kubernetes

ComplianceAsCode/content#8453 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Bash/Ansible Remediation of `ensure_redhat_gpgkey_installed` doesn't consider CentOS Stream keys Open

RHEL triaged

ComplianceAsCode/content#8480 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
man scap-security-guide(8) mix Centos and RHEL Open

Documentation triaged

ComplianceAsCode/content#8528 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Column SRG in STIG mapping tables has invalid data Open

Documentation triaged

ComplianceAsCode/content#8644 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Check if dconf_gnome_enable_smartcard_auth should be part of RHEL9 SRG mapping Open

RHEL9 STIG triaged

ComplianceAsCode/content#8697 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Wrong usage of lineinfile template Open

Ansible Bash OVAL triaged

ComplianceAsCode/content#8744 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Improve usability of sshd_lineinfile template Open

triaged

ComplianceAsCode/content#8794 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
xccdf_org.ssgproject.content_rule_audit_rules_dac_modification_* report false negative Open

Oracle Linux triaged

ComplianceAsCode/content#8818 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Template or macro for umask related rules Open

enhancement triaged

ComplianceAsCode/content#8919 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Task "Set gpgcheck=1 for each yum repo" fails with templating type error when var ensure_gpgcheck_never_disabled is set to false Open

CIS RHEL7 triaged

ComplianceAsCode/content#8945 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
grub2_disable_interactive_boot is not UEFI aware Open

triaged

ComplianceAsCode/content#9044 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
filter_rules does not work with boolean "dynamic" platforms Open

triaged

ComplianceAsCode/content#9077 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Parameter `mount_has_to_exist` from template `mount_option_remote_filesystems` is not used Open

refactoring triaged

ComplianceAsCode/content#9137 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Ansible profile playbooks are failing ansible-lint because of wrong indentation Open

Ansible Infrastructure triaged

ComplianceAsCode/content#9314 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Make use of sshd's include directive now that OCP switched to 8.6+ Open

enhancement OpenShift

ComplianceAsCode/content#9327 · 2 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Rule configure_gnutls_tls_crypto_policy doesn't work with the new gnutls.config file format Open

RHEL9 STIG triaged

ComplianceAsCode/content#9385 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Evaluate usage of `[[:blank:]]` instead of `\s` across the project's regexes Open

OVAL triaged

ComplianceAsCode/content#9399 · 2 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Crypto Policies vs RHEL9 STIG Open

RHEL9 STIG triaged

ComplianceAsCode/content#9540 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
The `var_event_record_qps.var` doesn't match the type specified in the `yamlfile_value` template Open

OpenShift triaged

ComplianceAsCode/content#9564 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
The ssg.yaml.open_and_expand function does not recognize {"x": true} as a boolean value Open

enhancement triaged

ComplianceAsCode/content#9749 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Assess performance impact of auditd rules comparing "File System" and "System Calls" controls Open

help-wanted triaged

ComplianceAsCode/content#9849 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Duplicate key members holding rule ID Open

Infrastructure triaged

ComplianceAsCode/content#9882 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Rules related to ntp shouldn't be present in products where ntp isn't available Open

CPE-AL triaged

ComplianceAsCode/content#10022 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
accounts_password_set_max_life_existing is misaligned with DISA Open

blocked productization-issue triaged

ComplianceAsCode/content#10083 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
sysctl template Open

enhancement triaged

ComplianceAsCode/content#10203 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Logrotate cronjob checks Open

enhancement triaged

ComplianceAsCode/content#10206 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Automatus struggles with profile-specific test scenarios Open

Test Suite triaged

ComplianceAsCode/content#10369 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Build system does not check if OVAL definition ID, generated from a template, is in sync with the rule (or platform) Open

CPE-AL Infrastructure OVAL triaged

ComplianceAsCode/content#10443 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

ComplianceAsCode

Get new issues in your inbox