ComplianceAsCode/content

View on GitHub

Security automation content in SCAP, Bash, Ansible, and other formats

Stars: 2.8k
Forks: 828
Open beginner issues: 0
Indexed issues: 181
Avg merge: 3d 8m
Merged PRs (30d): 80

Dominant language: Shell
License: No license data
Last GitHub push: Sep 14, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue help wanted

Open All

181 open issues indexed

xccdf_org.ssgproject.content_rule_harden_sshd_ciphers_openssh_conf_crypto_policy (CCE-85902-5) fails due to excess whitespace Open

enhancement triaged

ComplianceAsCode/content#12186 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Pattern matching not working correctly for command line Open

triaged

ComplianceAsCode/content#12263 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
The no_shelllogin_for_systemaccounts rule has incorrect regex, when looking for uid min/max, the entire /etc/login.defs file is outputted. Open

triaged

ComplianceAsCode/content#12264 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Allow and use UUIDs for mount options and point remedations Open

Bash triaged

ComplianceAsCode/content#12273 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Some systemd rules fail after kickstart installation Open

productization-issue RHEL RHEL10 RHEL9 triaged

ComplianceAsCode/content#12282 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
ANSSI BP28 - R28 Misalignments in RHEL 9 Profile Open

ANSSI RHEL9 triaged

ComplianceAsCode/content#12289 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
default branch name not inclusive Open

triaged

ComplianceAsCode/content#12392 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Alinux 3 OpenSCAP scanning not working Open

Alibaba Linux

ComplianceAsCode/content#12401 · 11 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Ensure consistency among SSH related rules Open

enhancement triaged Update Rule

ComplianceAsCode/content#12420 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Automatus tests fail when rules marked with 'platform: machine' are run in a container environment Open

triaged

ComplianceAsCode/content#12511 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
/etc/sudoers.d regex is incomplete Open

triaged

ComplianceAsCode/content#12588 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
How should the file_owner template handle symlinks? Open

triaged

ComplianceAsCode/content#12601 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
harden_openssl_crypto_policy rule edits configs it shouldn't to enable things it shouldn't Open

triaged

ComplianceAsCode/content#12646 · 2 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
xccdf_org.ssgproject.content_rule_aide_build_database fails on Fedora even if database exist Open

triaged

ComplianceAsCode/content#12740 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
RHEL 8 OpenSCAP STIG scan diverges from RHEL 8 DISA STIG V2R1 Open

triaged

ComplianceAsCode/content#12801 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
create a new template for audit watches Open

triaged

ComplianceAsCode/content#12827 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
`kdump` is not disabled via Kickstart remediations on RHEL-10 Open

blocked productization-issue RHEL10 triaged

ComplianceAsCode/content#12832 · 7 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Crypto-policy-related rules fail on RHEL-8 when installed with `fips=1` Open

blocked productization-issue RHEL RHEL8 triaged

ComplianceAsCode/content#12942 · 10 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
crypto policy: NO-SHA1 is not needed for EL9 Open

enhancement triaged

ComplianceAsCode/content#13017 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Almalinux not included in product for audit rule perm_x Open

triaged

ComplianceAsCode/content#13075 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
DISA STIG different than content for rule checks --eg privileged perm_mod Open

triaged

ComplianceAsCode/content#13076 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Description and check are misaligned for commands_kmod Open

triaged

ComplianceAsCode/content#13077 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Please explain how to write a newline in a banner such as /etc/issue Open

triaged

ComplianceAsCode/content#13080 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add CIS SUSE Entreprise 15 Benchmark 2.0.0 Open

triaged

ComplianceAsCode/content#13104 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
The `uefi` and `non-uefi` platforms have incoherent conditionals Open

triaged

ComplianceAsCode/content#13151 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Rule networkmanager_dns_mode is misaligned with DISA Open

Ansible blocked productization-issue RHEL9 STIG triaged

ComplianceAsCode/content#13236 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
False Positive finding with `configure_openssl_tls_crypto_policy` on UBI 9 container Open

triaged

ComplianceAsCode/content#13439 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
False Positive finding with `harden_sshd_ciphers_openssh_conf_crypto_policy` on Gitlab UBI 9 container Open

triaged

ComplianceAsCode/content#13440 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CIS Level 2 Benchmark Support for Debian 12 Open

triaged

ComplianceAsCode/content#13450 · 3 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Private Vulnerability Disclosure not Enabled Open

triaged

ComplianceAsCode/content#13463 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
RHEL sshd_strong_kex values not compatible with OVAL logic Open

RHEL triaged

ComplianceAsCode/content#13498 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Build SCE by Default Open

triaged

ComplianceAsCode/content#13547 · 2 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
RHEL 9 grub rules are misaligned with DISA Open

triaged

ComplianceAsCode/content#13548 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Incomplete implementation for rhel rule RHEL-09-252020 Open

RHEL9 triaged

ComplianceAsCode/content#13624 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
coredump_disable_* misaligned with DISA STIG Open

blocked productization-issue RHEL RHEL8 RHEL9 triaged

ComplianceAsCode/content#13676 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
False Positive in ssg-object_no_runas_spec Regex – Matches Defaults Lines in /etc/sudoers Open

triaged

ComplianceAsCode/content#13704 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Why is configure_crypto_policy checking for existence of /etc/crypto-policies/back-ends/nss.config? Open

triaged

ComplianceAsCode/content#13728 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Discrepency between rule description and rule check, remediation snippet/script in Debian 12 guide anssi bp28 high and enhanced Open

triaged

ComplianceAsCode/content#13731 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
crypto-policies expects "DEFAULT" yet CIS Benchmark says "not LEGACY" Open

triaged

ComplianceAsCode/content#13741 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Build and test AIDE database - test existence of operational aide database file - fails when file is present Open

triaged

ComplianceAsCode/content#13765 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
OL7: invalid link in the PCI-DSS table Open

Oracle Linux triaged

ComplianceAsCode/content#13816 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Consider moving cryptopolicy related rules from fips group to crypto group Open

triaged

ComplianceAsCode/content#13852 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Lab Exercise 2 mismatch between host OS version and built version from documentation Open

triaged

ComplianceAsCode/content#13854 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Bad `separator_regex` value for validation of Postfix's `smtpd_client_restrictions` configuration-item. Open

triaged

ComplianceAsCode/content#13891 · 1 comment · 4 reactions · 0 assignees · Indexed Sep 15, 2026
Error when running check content_rule_accounts_umask_interactive_users Open

triaged Ubuntu

ComplianceAsCode/content#14018 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Firewalld-related remediation rules fail on first run but pass on second run in Rocky Linux 9 Open

triaged

ComplianceAsCode/content#14130 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Some rules scan the hypershift management cluster Open

ComplianceAsCode/content#14151 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Rule package_rsh_removed could return false positive on Ubuntu with OpenSCAP 1.4.3 Open

Debian triaged Ubuntu

ComplianceAsCode/content#14187 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Grub Issue in ansible playbook debian 13 Open

Debian triaged Ubuntu

ComplianceAsCode/content#14251 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Debian 13 - systctl.conf no longer used Open

Debian triaged

ComplianceAsCode/content#14266 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026

ComplianceAsCode/content

Get new issues in your inbox