List view

Add operation and datatype support to grub2_bootloader_argument template

Status: Open (in progress).

ComplianceAsCode/contentnumber 14626

#14626 In ComplianceAsCode/content;

· macko1 opened on Apr 7, 2026

CMP-4248 added compliance checks

CoreOSCoreOS product related.CoreOS product related.

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14665

#14665 In ComplianceAsCode/content;

· vickeybrown opened on Apr 20, 2026

OL7: invalid link in the PCI-DSS table

Oracle LinuxOracle Linux product related.Oracle Linux product related.

triaged

Status: Open.

#13816 In ComplianceAsCode/content;

· vojtapolasek opened on Aug 26, 2025

Add new build option to generate ansible roles out of profile ansible playbooks

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

needs-rebaseUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 13831

#13831 In ComplianceAsCode/content;

· ggbecker opened on Aug 28, 2025

CMP-3566: Ensure a CLF exists and check for secure URLs

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14031

#14031 In ComplianceAsCode/content;

· yuumasato opened on Oct 21, 2025

CMP-3756: Configure MintMaker updates on RPM lockfiles

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14041

#14041 In ComplianceAsCode/content;

· yuumasato opened on Oct 24, 2025

Add Amazon Linux 2023 DISA STIG Profile

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

needs-rebaseUsed by openshift-ci bot.Used by openshift-ci bot.

New ProfileIssues or pull requests related to new Profiles.Issues or pull requests related to new Profiles.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14246

#14246 In ComplianceAsCode/content;

· Eric-Domeier opened on Dec 16, 2025

Add build-time test for ansible variable conflicts

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14347

#14347 In ComplianceAsCode/content;

· ggbecker opened on Jan 30, 2026

CMP-3730: Updated banner_etc_issue to use variable

ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14615

#14615 In ComplianceAsCode/content;

· vickeybrown opened on Apr 2, 2026

Fix rsyslog logfiles bash remediation for omfile paths and globs

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14715

#14715 In ComplianceAsCode/content;

· Mab879 opened on May 15, 2026

rootfiles_configured: populate /usr/share/rootfiles/ in remediation

bugfixFixes to reported bugs.Fixes to reported bugs.

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

STIGSTIG Benchmark related.STIG Benchmark related.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14710

#14710 In ComplianceAsCode/content;

· ggbecker opened on May 12, 2026

Add rule crypto_policy_not_overridden for RHEL-09-672020

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

RHEL9Red Hat Enterprise Linux 9 product related.Red Hat Enterprise Linux 9 product related.

STIGSTIG Benchmark related.STIG Benchmark related.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14709

#14709 In ComplianceAsCode/content;

· ggbecker opened on May 12, 2026

Sle16 update sudoers related rules checks and remediations

AnsibleAnsible remediation update.Ansible remediation update.

BashBash remediation update.Bash remediation update.

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

OVALOVAL update. Related to the systems assessments.OVAL update. Related to the systems assessments.

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Update TemplateIssues or pull requests related to Templates updates.Issues or pull requests related to Templates updates.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14698

#14698 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on May 7, 2026

Add NIST 800-53 Rev 5 control framework with OSCAL metadata and CIS mappings (Split per product)

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14648

#14648 In ComplianceAsCode/content;

· ggbecker opened on Apr 13, 2026

Fix podman test compatibility: remove hardcoded network backend

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14422

#14422 In ComplianceAsCode/content;

· Copilot opened on Feb 18, 2026

SLE16 check permissions /usr/etc/ssh/sshd_config

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Update RuleIssues or pull requests related to Rules updates.Issues or pull requests related to Rules updates.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14439

#14439 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 23, 2026

Update find-rule skill to look for sibling rules

Status: Open (in progress).

ComplianceAsCode/contentnumber 14530

#14530 In ComplianceAsCode/content;

· rhmdnd opened on Mar 4, 2026

Add a skill for reviewing OpenShift ci results

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14572

#14572 In ComplianceAsCode/content;

· rhmdnd opened on Mar 12, 2026

Harden filter evaluation and command execution

InfrastructureOur content build systemOur content build system

Status: Open (in progress).

ComplianceAsCode/contentnumber 14591

#14591 In ComplianceAsCode/content;

· shawndwells opened on Mar 20, 2026

Adding Debian 13 CIS controls to the benchmark

CISCIS Benchmark related.CIS Benchmark related.

DebianDebian product related.Debian product related.

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

New ProfileIssues or pull requests related to new Profiles.Issues or pull requests related to new Profiles.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14684

#14684 In ComplianceAsCode/content;

· scdarva opened on Apr 29, 2026

CMP-3628: fixed rule to allow kubelet to be unconfined

CoreOSCoreOS product related.CoreOS product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14700

#14700 In ComplianceAsCode/content;

· vickeybrown opened on May 8, 2026

Add new product for Ubuntu 26.04 and a default profile

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

New ProductIssues or pull requests related to new Products.Issues or pull requests related to new Products.

UbuntuUbuntu product related.Ubuntu product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14721

#14721 In ComplianceAsCode/content;

· WolfAnto opened on May 19, 2026

Add default domain to SSSD related remediations and fix Fedora test failures

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14726

#14726 In ComplianceAsCode/content;

· Arden97 opened on May 20, 2026

file_permission_user_init_files_root: include /root in OCIL check

bugfixFixes to reported bugs.Fixes to reported bugs.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14732

#14732 In ComplianceAsCode/content;

· ggbecker opened on May 21, 2026

sysctl template: add AlmaLinux to /lib/sysctl.d exclusion list to fix false positive sysctl failures

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14724

#14724 In ComplianceAsCode/content;

· MitchDrage opened on May 20, 2026