ComplianceAsCode/content

View on GitHub

Security automation content in SCAP, Bash, Ansible, and other formats

Stars: 2.8k
Forks: 828
Open beginner issues: 0
Indexed issues: 181
Avg merge: 3d 8m
Merged PRs (30d): 80

Dominant language: Shell
License: No license data
Last GitHub push: Sep 14, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue help wanted

Open All

181 open issues indexed

Cannot use firefox rules in a fedora profile with additional_content_directories Open

triaged

ComplianceAsCode/content#10462 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Platforms `uefi` and `non-uefi` have duplicate code, that could be refactored with the help of platform expressions Open

CPE-AL enhancement Infrastructure triaged

ComplianceAsCode/content#10501 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Dconf and select PAM rules freeze system during remediation Open

Fedora triaged

ComplianceAsCode/content#10507 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Mount option rules have inconsistent results after remediation Open

CPE-AL triaged Update Rule

ComplianceAsCode/content#10508 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Build system should give a warning/error when encountering a parametrized rules without its respective variables in a profile Open

enhancement Infrastructure triaged

ComplianceAsCode/content#10541 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
An empty file is created when building Ansible playbooks for individual rules Open

Ansible Infrastructure triaged

ComplianceAsCode/content#10734 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
ansible-role-rhel8-cis fails to apply with issues with "Limit Password Reuse: password-auth" Open

Ansible CIS RHEL8 triaged

ComplianceAsCode/content#10757 · 5 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
RFE: Use numeric comparison in jinja macro create_local_interactive_users_object Open

help-wanted OVAL triaged

ComplianceAsCode/content#10845 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Rule configure_crypto_policy is failing tests Open

blocked OSPP pci-dss productization-issue RHEL8 RHEL9 triaged

ComplianceAsCode/content#10895 · 14 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Backups in offline mode Open

enhancement triaged

ComplianceAsCode/content#10926 · 5 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Remediation should support chroot environments Open

CPE-AL triaged

ComplianceAsCode/content#10967 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
SSH Client Alive Count Max and Interval not updated on default sshd_config Open

Ansible triaged

ComplianceAsCode/content#11000 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Consider checking kernel modules in run-time Open

enhancement triaged

ComplianceAsCode/content#11050 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
a question of rule accounts_passwords_pam_faillock_deny Open

enhancement triaged

ComplianceAsCode/content#11141 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Test for mount-options on `/tmp` are incomplete Open

triaged

ComplianceAsCode/content#11184 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
sysctl_kernel_kptr_restrict should pass with stricter value Open

triaged

ComplianceAsCode/content#11216 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
sysctl_kernel_yama_ptrace_scope should pass with stricter value Open

triaged

ComplianceAsCode/content#11217 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Grub2 kernel arguments rules detection failure on ostree OS Open

Fedora triaged

ComplianceAsCode/content#11220 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Include Autotailor in Workshop material Open

triaged

ComplianceAsCode/content#11230 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Incorrect instructions for ocp4-stig-node-worker-kubelet-enable-protect-kernel-sysctl-file-exist Open

OpenShift

ComplianceAsCode/content#11253 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
RHEL8 DS object_accounts_interactive_users results in Error if file like .esd_auth is present in homedir Open

triaged

ComplianceAsCode/content#11276 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
rpm_verify_permissions is failing in RHEL after pci-dss hardening Open

pci-dss RHEL triaged unclear

ComplianceAsCode/content#11285 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
chrony.conf moved content_rule_chronyd_specify_remote_server now broken Open

Debian triaged

ComplianceAsCode/content#11416 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
OSCAL Import/Update Job fails with OSCAL 1.1.1 content Open

OSCAL triaged

ComplianceAsCode/content#11435 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Review OVAL tests in configure_crypto_policy Open

OSPP RHEL triaged

ComplianceAsCode/content#11536 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
`enable_fips_mode` and `enable_dracut_fips_module` fail in Image Builder Open

osbuild triaged

ComplianceAsCode/content#11567 · 0 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Rule harden_sshd_ciphers_openssh_conf_crypto_policy and harden_sshd_ciphers_opensshserver_conf_crypto_policy do not align with DISA STIG RHEL 9 V1R2 Open

triaged

ComplianceAsCode/content#11575 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
rule_aide_use_fips_hashes fails after remediation on RHEL 9 Open

triaged

ComplianceAsCode/content#11576 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add OL8 CIS Profile addressing CIS Oracle Linux 8 Benchmark v3.0.0 Open

enhancement Oracle Linux triaged

ComplianceAsCode/content#11597 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
The `products` key in `rule_dirs.json` contains all products Open

triaged

ComplianceAsCode/content#11619 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
syslog-ng and rsyslog failed and conflict on debian 12 Open

Debian

ComplianceAsCode/content#11620 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
incorrectly failing for a multiple DNS rule Open

triaged

ComplianceAsCode/content#11623 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
UX Improvments for ./utils/gen_rendered_policies_index.py Open

enhancement triaged

ComplianceAsCode/content#11669 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
no_shelllogin_for_systemaccounts is misaligned with DISA Open

blocked productization-issue RHEL9 STIG triaged

ComplianceAsCode/content#11698 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
RHEL-08-010671 and RHEL-08-040282 missing paths per STIG Open

RHEL STIG triaged

ComplianceAsCode/content#11748 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
RHEL-08-010161 and RHEL-09-611205 removing keytab files, breaking sssd (misaligned with DISA) Open

RHEL STIG triaged

ComplianceAsCode/content#11764 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 15, 2026
compare_results.py: show rule ID in case one of results is "not applicable" Open

enhancement triaged

ComplianceAsCode/content#11786 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[BUG] RHEL-related automation should not inject log-collector hostname into /etc/rsyslog.conf Open

enhancement triaged

ComplianceAsCode/content#11812 · 5 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Investigate if other banners have the same behavior of /etc/motd banner as described in #11826 Open

good first issue OVAL RHEL triaged

ComplianceAsCode/content#11844 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
rhel8-playbook-stig.yml and rhel9-playbook-stig.yml using stale ansible_facts Open

enhancement triaged

ComplianceAsCode/content#11865 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Failed to build rhel8 content in lab1 environment Open

triaged

ComplianceAsCode/content#11876 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CIS 5.2.3.4 audit date and time fails in the CIS Assessor after remediation Open

triaged

ComplianceAsCode/content#11885 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
You can't use `sed -i` on /etc/sysctl.d/*.conf Open

triaged

ComplianceAsCode/content#11908 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
"<" operator in jq filter fails the build Open

triaged

ComplianceAsCode/content#11922 · 4 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
CIS 1.3.1 Ensure AIDE is installed Open

Debian triaged Ubuntu

ComplianceAsCode/content#11929 · 5 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Should files in /tmp be checked for permissions when using tmpfs? Open

OVAL triaged

ComplianceAsCode/content#11972 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Fedora Workstation 40 Remediations Open

enhancement Fedora triaged

ComplianceAsCode/content#12007 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Failed on "Set SELinux boolean ssh_sysadm_login accordingly" Open

Amazon Linux triaged

ComplianceAsCode/content#12022 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Multiple formats used in NIST 800-53 control ID references Open

enhancement triaged

ComplianceAsCode/content#12027 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
template issue: file_groupowner fails tests of itself Open

triaged

ComplianceAsCode/content#12131 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

ComplianceAsCode/content

Get new issues in your inbox