List view

OL7: invalid link in the PCI-DSS table

Oracle LinuxOracle Linux product related.Oracle Linux product related.

triaged

Status: Open.

#13816 In ComplianceAsCode/content;

· vojtapolasek opened on Aug 26, 2025

Add new build option to generate ansible roles out of profile ansible playbooks

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 13831

#13831 In ComplianceAsCode/content;

· ggbecker opened on Aug 28, 2025

CMP-3566: Ensure a CLF exists and check for secure URLs

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14031

#14031 In ComplianceAsCode/content;

· yuumasato opened on Oct 21, 2025

Show CCE identifiers in the HTML rendered control files

Status: Open (in progress).

ComplianceAsCode/contentnumber 14034

#14034 In ComplianceAsCode/content;

· ggbecker opened on Oct 22, 2025

CMP-3756: Configure MintMaker updates on RPM lockfiles

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14041

#14041 In ComplianceAsCode/content;

· yuumasato opened on Oct 24, 2025

Add python script to refresh the ansible galaxy roles on RedHatOfficial

AnsibleAnsible remediation update.Ansible remediation update.

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14190

#14190 In ComplianceAsCode/content;

· ggbecker opened on Nov 27, 2025

CMP-3978: Incorporate SSH version into obsolete parameter rules

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14189

#14189 In ComplianceAsCode/content;

· rhmdnd opened on Nov 26, 2025

Add Amazon Linux 2023 DISA STIG Profile

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

New ProfileIssues or pull requests related to new Profiles.Issues or pull requests related to new Profiles.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14246

#14246 In ComplianceAsCode/content;

· Eric-Domeier opened on Dec 16, 2025

Add notes about RHEL 10 CIS requirement 2.1.19

CISCIS Benchmark related.CIS Benchmark related.

RHEL10Red Hat Enterprise Linux 10 product related.Red Hat Enterprise Linux 10 product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14253

#14253 In ComplianceAsCode/content;

· jan-cerny opened on Dec 17, 2025

Update Konflux references

ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14218

#14218 In ComplianceAsCode/content;

· red-hat-konflux-kflux-prd-rh02 opened on Dec 6, 2025

Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 0b10508

ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14219

#14219 In ComplianceAsCode/content;

· red-hat-konflux-kflux-prd-rh02 opened on Dec 6, 2025

Remove rule sshd_use_strong_kex from CIS profiles

CISCIS Benchmark related.CIS Benchmark related.

RHEL10Red Hat Enterprise Linux 10 product related.Red Hat Enterprise Linux 10 product related.

RHEL8Red Hat Enterprise Linux 8 product related.Red Hat Enterprise Linux 8 product related.

RHEL9Red Hat Enterprise Linux 9 product related.Red Hat Enterprise Linux 9 product related.

Update ProfileIssues or pull requests related to Profiles updates.Issues or pull requests related to Profiles updates.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14262

#14262 In ComplianceAsCode/content;

· jan-cerny opened on Dec 28, 2025

Remove rule configure_ssh_crypto_policy from RHEL 9 and 10

bugfixFixes to reported bugs.Fixes to reported bugs.

RHEL10Red Hat Enterprise Linux 10 product related.Red Hat Enterprise Linux 10 product related.

RHEL9Red Hat Enterprise Linux 9 product related.Red Hat Enterprise Linux 9 product related.

Update ProfileIssues or pull requests related to Profiles updates.Issues or pull requests related to Profiles updates.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14263

#14263 In ComplianceAsCode/content;

· jan-cerny opened on Dec 28, 2025

Add rule accounts_password_pam_pwhistory_enforce_for_root

bugfixFixes to reported bugs.Fixes to reported bugs.

CISCIS Benchmark related.CIS Benchmark related.

RHEL8Red Hat Enterprise Linux 8 product related.Red Hat Enterprise Linux 8 product related.

RHEL9Red Hat Enterprise Linux 9 product related.Red Hat Enterprise Linux 9 product related.

Update ProfileIssues or pull requests related to Profiles updates.Issues or pull requests related to Profiles updates.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14264

#14264 In ComplianceAsCode/content;

· jan-cerny opened on Dec 28, 2025

Shadow test scenario

productization-issueIssue found in upstream stabilization process.Issue found in upstream stabilization process.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14265

#14265 In ComplianceAsCode/content;

· jan-cerny opened on Dec 28, 2025

Remove XSLT templates

InfrastructureOur content build systemOur content build system

Status: Open (in progress).

ComplianceAsCode/contentnumber 14267

#14267 In ComplianceAsCode/content;

· jan-cerny opened on Dec 30, 2025

Update Fedora CIS profile

CISCIS Benchmark related.CIS Benchmark related.

FedoraFedora product related.Fedora product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14268

#14268 In ComplianceAsCode/content;

· jan-cerny opened on Dec 30, 2025

Update RHEL 8 CIS profile

CISCIS Benchmark related.CIS Benchmark related.

HighlightThis PR/Issue should make it to the featured changelog.This PR/Issue should make it to the featured changelog.

RHEL8Red Hat Enterprise Linux 8 product related.Red Hat Enterprise Linux 8 product related.

Update ProfileIssues or pull requests related to Profiles updates.Issues or pull requests related to Profiles updates.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14269

#14269 In ComplianceAsCode/content;

· jan-cerny opened on Jan 2, 2026

Add quiet mode to tests/missing_cces.py

Status: Open (in progress).

ComplianceAsCode/contentnumber 14270

#14270 In ComplianceAsCode/content;

· jan-cerny opened on Jan 2, 2026

Sle15 logind session timeout rule fixes

AnsibleAnsible remediation update.Ansible remediation update.

BashBash remediation update.Bash remediation update.

OVALOVAL update. Related to the systems assessments.OVAL update. Related to the systems assessments.

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14271

#14271 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Jan 2, 2026