List view

Add operation and datatype support to grub2_bootloader_argument template

Status: Open (in progress).

ComplianceAsCode/contentnumber 14626

#14626 In ComplianceAsCode/content;

· macko1 opened on Apr 7, 2026

CMP-4248 added compliance checks

CoreOSCoreOS product related.CoreOS product related.

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14665

#14665 In ComplianceAsCode/content;

· vickeybrown opened on Apr 20, 2026

OL7: invalid link in the PCI-DSS table

Oracle LinuxOracle Linux product related.Oracle Linux product related.

triaged

Status: Open.

#13816 In ComplianceAsCode/content;

· vojtapolasek opened on Aug 26, 2025

Add new build option to generate ansible roles out of profile ansible playbooks

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

needs-rebaseUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 13831

#13831 In ComplianceAsCode/content;

· ggbecker opened on Aug 28, 2025

CMP-3566: Ensure a CLF exists and check for secure URLs

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14031

#14031 In ComplianceAsCode/content;

· yuumasato opened on Oct 21, 2025

CMP-3756: Configure MintMaker updates on RPM lockfiles

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14041

#14041 In ComplianceAsCode/content;

· yuumasato opened on Oct 24, 2025

Add Amazon Linux 2023 DISA STIG Profile

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

needs-rebaseUsed by openshift-ci bot.Used by openshift-ci bot.

New ProfileIssues or pull requests related to new Profiles.Issues or pull requests related to new Profiles.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14246

#14246 In ComplianceAsCode/content;

· Eric-Domeier opened on Dec 16, 2025

Add build-time test for ansible variable conflicts

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14347

#14347 In ComplianceAsCode/content;

· ggbecker opened on Jan 30, 2026

CMP-3730: Updated banner_etc_issue to use variable

ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14615

#14615 In ComplianceAsCode/content;

· vickeybrown opened on Apr 2, 2026

Fix rsyslog logfiles bash remediation for omfile paths and globs

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14715

#14715 In ComplianceAsCode/content;

· Mab879 opened on May 15, 2026

rootfiles_configured: populate /usr/share/rootfiles/ in remediation

bugfixFixes to reported bugs.Fixes to reported bugs.

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

STIGSTIG Benchmark related.STIG Benchmark related.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14710

#14710 In ComplianceAsCode/content;

· ggbecker opened on May 12, 2026

Add rule crypto_policy_not_overridden for RHEL-09-672020

RHEL9Red Hat Enterprise Linux 9 product related.Red Hat Enterprise Linux 9 product related.

STIGSTIG Benchmark related.STIG Benchmark related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14709

#14709 In ComplianceAsCode/content;

· ggbecker opened on May 12, 2026

Add NIST 800-53 Rev 5 control framework with OSCAL metadata and CIS mappings (Split per product)

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14648

#14648 In ComplianceAsCode/content;

· ggbecker opened on Apr 13, 2026

Fix podman test compatibility: remove hardcoded network backend

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14422

#14422 In ComplianceAsCode/content;

· Copilot opened on Feb 18, 2026

SLE16 check permissions /usr/etc/ssh/sshd_config

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Update RuleIssues or pull requests related to Rules updates.Issues or pull requests related to Rules updates.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14439

#14439 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 23, 2026

Update find-rule skill to look for sibling rules

Status: Open (in progress).

ComplianceAsCode/contentnumber 14530

#14530 In ComplianceAsCode/content;

· rhmdnd opened on Mar 4, 2026

Add a skill for reviewing OpenShift ci results

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14572

#14572 In ComplianceAsCode/content;

· rhmdnd opened on Mar 12, 2026

Harden filter evaluation and command execution

InfrastructureOur content build systemOur content build system

Status: Open (in progress).

ComplianceAsCode/contentnumber 14591

#14591 In ComplianceAsCode/content;

· shawndwells opened on Mar 20, 2026

Adding Debian 13 CIS controls to the benchmark

CISCIS Benchmark related.CIS Benchmark related.

DebianDebian product related.Debian product related.

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

New ProfileIssues or pull requests related to new Profiles.Issues or pull requests related to new Profiles.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14684

#14684 In ComplianceAsCode/content;

· scdarva opened on Apr 29, 2026

CMP-3628: fixed rule to allow kubelet to be unconfined

CoreOSCoreOS product related.CoreOS product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14700

#14700 In ComplianceAsCode/content;

· vickeybrown opened on May 8, 2026

Add new product for Ubuntu 26.04 and a default profile

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

New ProductIssues or pull requests related to new Products.Issues or pull requests related to new Products.

UbuntuUbuntu product related.Ubuntu product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14721

#14721 In ComplianceAsCode/content;

· WolfAnto opened on May 19, 2026

Add default domain to SSSD related remediations and fix Fedora test failures

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14726

#14726 In ComplianceAsCode/content;

· Arden97 opened on May 20, 2026

Update OL8 STIG profile to DISA STIG V2R8

Oracle LinuxOracle Linux product related.Oracle Linux product related.

STIGSTIG Benchmark related.STIG Benchmark related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14738

#14738 In ComplianceAsCode/content;

· mrkanon opened on May 26, 2026