List view

OL7: invalid link in the PCI-DSS table

Oracle LinuxOracle Linux product related.Oracle Linux product related.

triaged

Status: Open.

#13816 In ComplianceAsCode/content;

· vojtapolasek opened on Aug 26, 2025

Add new build option to generate ansible roles out of profile ansible playbooks

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

needs-rebaseUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 13831

#13831 In ComplianceAsCode/content;

· ggbecker opened on Aug 28, 2025

CMP-3566: Ensure a CLF exists and check for secure URLs

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14031

#14031 In ComplianceAsCode/content;

· yuumasato opened on Oct 21, 2025

CMP-3756: Configure MintMaker updates on RPM lockfiles

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14041

#14041 In ComplianceAsCode/content;

· yuumasato opened on Oct 24, 2025

Add Amazon Linux 2023 DISA STIG Profile

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

needs-rebaseUsed by openshift-ci bot.Used by openshift-ci bot.

New ProfileIssues or pull requests related to new Profiles.Issues or pull requests related to new Profiles.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14246

#14246 In ComplianceAsCode/content;

· Eric-Domeier opened on Dec 16, 2025

Add build-time test for ansible variable conflicts

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14347

#14347 In ComplianceAsCode/content;

· ggbecker opened on Jan 30, 2026

Patch ansible remediation for postfix_network_listening_disabled rule

AnsibleAnsible remediation update.Ansible remediation update.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14394

#14394 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 14, 2026

Fix podman test compatibility: remove hardcoded network backend

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14422

#14422 In ComplianceAsCode/content;

· Copilot opened on Feb 18, 2026

Use drop-ins file in /etc/login.defs.d/

AnsibleAnsible remediation update.Ansible remediation update.

BashBash remediation update.Bash remediation update.

OVALOVAL update. Related to the systems assessments.OVAL update. Related to the systems assessments.

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14438

#14438 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 23, 2026

SLE16 check permissions /usr/etc/ssh/sshd_config

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Update RuleIssues or pull requests related to Rules updates.Issues or pull requests related to Rules updates.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14439

#14439 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 23, 2026

Update find-rule skill to look for sibling rules

Status: Open (in progress).

ComplianceAsCode/contentnumber 14530

#14530 In ComplianceAsCode/content;

· rhmdnd opened on Mar 4, 2026

Harden filter evaluation and command execution

InfrastructureOur content build systemOur content build system

Status: Open (in progress).

ComplianceAsCode/contentnumber 14591

#14591 In ComplianceAsCode/content;

· shawndwells opened on Mar 20, 2026

Add NIST 800-53 Rev 5 control framework with OSCAL metadata and CIS mappings (Split per product)

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14648

#14648 In ComplianceAsCode/content;

· ggbecker opened on Apr 13, 2026

CMP-3730: Updated banner_etc_issue to use variable

ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14615

#14615 In ComplianceAsCode/content;

· vickeybrown opened on Apr 2, 2026

CMP-4248 added compliance checks

CoreOSCoreOS product related.CoreOS product related.

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14665

#14665 In ComplianceAsCode/content;

· vickeybrown opened on Apr 20, 2026

SLE16 fix ensure_logrotate_activated to work with /etc configuration

AnsibleAnsible remediation update.Ansible remediation update.

BashBash remediation update.Bash remediation update.

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

OVALOVAL update. Related to the systems assessments.OVAL update. Related to the systems assessments.

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14680

#14680 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Apr 27, 2026

Adding Debian 13 CIS controls to the benchmark

CISCIS Benchmark related.CIS Benchmark related.

DebianDebian product related.Debian product related.

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

New ProfileIssues or pull requests related to new Profiles.Issues or pull requests related to new Profiles.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14684

#14684 In ComplianceAsCode/content;

· scdarva opened on Apr 29, 2026

[Infra Only] Add NIST 800-53 Rev 5 control framework with OSCAL metadata and CIS mappings (Split per product)

Status: Open (in progress).

ComplianceAsCode/contentnumber 14685

#14685 In ComplianceAsCode/content;

· ggbecker opened on Apr 29, 2026

Add a skill for reviewing OpenShift ci results

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14572

#14572 In ComplianceAsCode/content;

· rhmdnd opened on Mar 12, 2026

profiles/rhel9+rhel10/hipaa: add grub2_audit_backlog_limit_argument

bugfixFixes to reported bugs.Fixes to reported bugs.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14688

#14688 In ComplianceAsCode/content;

· ggbecker opened on Apr 30, 2026

Add var_system_crypto_policy to RHEL9 STIG profiles

bugfixFixes to reported bugs.Fixes to reported bugs.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14689

#14689 In ComplianceAsCode/content;

· Mab879 opened on Apr 30, 2026

SLE16 adapt sudoers rules to work both with /etc and distro_default

OVALOVAL update. Related to the systems assessments.OVAL update. Related to the systems assessments.

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14691

#14691 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on May 1, 2026

CMP-3618 broke kubernetes remediation into two

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14690

#14690 In ComplianceAsCode/content;

· vickeybrown opened on Apr 30, 2026