ComplianceAsCode

ComplianceAsCode/content

Security automation content in SCAP, Bash, Ansible, and other formats

Stars: 2.8k
Forks: 828
Open beginner issues: 0
Indexed issues: 181
Avg merge: 3d 8m
Merged PRs (30d): 80

Dominant language: Shell
License: No license data
Last GitHub push: Sep 14, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue help wanted

Open All

181 open issues indexed

PAM rule false positive Open

triaged

ComplianceAsCode/content#14313 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CIS for debian 13 Open

triaged

ComplianceAsCode/content#14385 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
`mount_option_nodev_nonroot_local_partitions` misaligned with DISA STIG SCAP Content Open

triaged

ComplianceAsCode/content#14390 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
RHEL-8-V2R4:- DISA STIG specifies 0740 but OpenSCAP profile audits for 0600 Open

triaged

ComplianceAsCode/content#14521 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
RHEL-8-V2R4: DISA STIG requires "silent" parameter but OpenSCAP profile audit logic causes false failure Open

triaged

ComplianceAsCode/content#14522 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
RHEL-8-V2R4: DISA STIG specifies 0640 but OpenSCAP audit logic enforces 0600 Open

triaged

ComplianceAsCode/content#14523 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Rule logind_session_timeout is misaligned with DISA Open

blocked productization-issue RHEL9 STIG triaged

ComplianceAsCode/content#14540 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
SLES package scap-security-guide contains only a limited set of profiles Open

SLES

ComplianceAsCode/content#14549 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Build and Test AIDE Database - Failed with exit code 17 Open

triaged

ComplianceAsCode/content#14556 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
RHEL-9-V2R6:The control is being implemented as required by the STIG but it is flagging as a failure by OpenSCAP Open

triaged

ComplianceAsCode/content#14598 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
RHEL-9-V2R6:OpenSCAP profile V2R5 expects different MAC order than STIG benchmark V2R6 specifies Open

triaged

ComplianceAsCode/content#14599 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
`Require use_authtok for pam_unix.so` checks for the wrong path on AlmaLinux 8 Open

triaged

ComplianceAsCode/content#14646 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Issue with accounts_password_pam_modules_in_authselect_profile Open

triaged

ComplianceAsCode/content#14652 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
k8scontent container images missing for v0.1.79 and v0.1.80 releases Open

triaged

ComplianceAsCode/content#14681 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
stig scan mistakenly concludes parameters have not been persisted to kernel because it looks at /etc/default/grub Open

ComplianceAsCode/content#14711 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
`crypto_policy_not_overridden` is misaligned with DISA Open

productization-issue triaged

ComplianceAsCode/content#14745 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
ssg/rule.yml does not block rules which are missing the `documentation_complete` tag. Open

triaged

ComplianceAsCode/content#14818 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
audit_log_forwarding_enabled: potential false negative when audit inputRef is not on the first pipeline Open

OpenShift

ComplianceAsCode/content#14910 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
use_pam_wheel_group_for_su remediation fails if setting is not present Open

SLES

ComplianceAsCode/content#14922 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Some ssh rules write remediation to /etc/ssh/sshd_config.d/ but check /etc/ssh/sshd_config Open

SLES triaged

ComplianceAsCode/content#14926 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Alma Linux Not Being Considered Part of RHEL Family? Open

triaged

ComplianceAsCode/content#14994 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Rule mount_option_tmp_noexec fails in /hardening/host-os/ansible Open

Ansible productization-issue triaged

ComplianceAsCode/content#15002 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
when conditionals in RHEL STIG roles fail with ansible-core 2.19+ Open

Ansible RHEL triaged

ComplianceAsCode/content#15005 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Rule file_permissions_audit_configuration_stig fails after Ansible Remediation on CentOS Stream Open

Ansible productization-issue triaged

ComplianceAsCode/content#15006 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
`lineinfile` template generates `regexp: ''`, so remediation overwrites the last line of the target file Open

Ansible triaged

ComplianceAsCode/content#15034 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Reconsider kickstart partition sizing now that Contest test disks are no longer limited to 20 GB Open

Kickstart triaged

ComplianceAsCode/content#15047 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
DISA-alignment mismatch on audit_rules_sudoers_d — SSG pass, DISA fail (RHEL 9.2/9.4/9.6/9.8/9.9) Open

productization-issue triaged

ComplianceAsCode/content#15052 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
DISA-alignment mismatch on audit_rules_login_events_faillock — SSG pass, DISA fail (RHEL 9.2/9.4/9.6/9.8/9.9) Open

productization-issue triaged

ComplianceAsCode/content#15053 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
DISA-alignment mismatch on audit_rules_login_events_lastlog — SSG pass, DISA fail (RHEL 9.2/9.4/9.6/9.8/9.9) Open

productization-issue triaged

ComplianceAsCode/content#15054 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
[packit] Propose downstream failed for release v0.1.82 Open

ComplianceAsCode/content#15078 · 11 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Ubuntu 24.04 - Fail to produce a valid STIG Viewer XCCDF (.xml) report. Open

ComplianceAsCode/content#15119 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

A short digest of beginner-friendly GitHub issues.