Skip to content

Pull requests: ComplianceAsCode/content

New pull request New
34 Open 11,454 Closed
34 Open 11,454 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Backport 15017
#15032 opened Aug 21, 2026 by Mab879 Member Loading… 0.1.82
2
Adjust file rules to not follow symlinks
#15031 opened Aug 21, 2026 by Mab879 Member Loading… 0.1.82
1
Remove display_login_attempts from Ubuntu 24.04's default profile needs-ok-to-test Used by openshift-ci bot.
#15030 opened Aug 21, 2026 by arian-zetier Loading…
1
2
Fix HIPAA session timeout for OpenSSH >= 8.2 Update Profile Issues or pull requests related to Profiles updates.
#15029 opened Aug 21, 2026 by ggbecker Member Loading… 0.1.83
@Mab879
4
CMP-4609: Fix file_permissions_scheduler rule to check for 0600 per CIS Benchmark ok-to-test Used by openshift-ci bot.
#15028 opened Aug 21, 2026 by taimurhafeez Contributor Loading… 0.1.83
8
Remove unused xinetd parameter from bash_service_command macro
#15027 opened Aug 21, 2026 by ggbecker Member Loading… 0.1.83
@Mab879
2
Change scope of grub2_bootloader_argument templated tests productization-issue Issue found in upstream stabilization process.
#15026 opened Aug 20, 2026 by jan-cerny Member Loading… 0.1.82
@Mab879
1
SLE fixes for sshd distributed config for approved macs and ciphers rules Ansible Ansible remediation update. Bash Bash remediation update. OVAL OVAL update. Related to the systems assessments. SLES SUSE Linux Enterprise Server product related. Test Suite Update in Test Suite.
#15021 opened Aug 20, 2026 by teacup-on-rockingchair Contributor Loading… 0.1.83
1
7
CMP-4605: Guard kubevirt NAD rules against NADs without a spec
#15020 opened Aug 19, 2026 by Vincent056 Contributor Loading…
1
DRAFT: fix remediations for file_permissions_audit_configuration_stig do-not-merge/work-in-progress Used by openshift-ci bot.
#15019 opened Aug 19, 2026 by macko1 Collaborator • Draft
9
Add RHEL9-specific audit rules for faillock and lastlog with auid filter RHEL9 Red Hat Enterprise Linux 9 product related. STIG STIG Benchmark related.
#15016 opened Aug 19, 2026 by ggbecker Member Loading… 0.1.83
@jan-cerny
8
Require 0600 permissions for SSH private keys on non-immutable systems do-not-merge/work-in-progress Used by openshift-ci bot. RHEL Red Hat Enterprise Linux product related. STIG STIG Benchmark related.
#15015 opened Aug 19, 2026 by ggbecker Member • Draft 0.1.83
1
4
Add NIST 800-53 Fedora Control (Based on RHEL10 control file) do-not-merge/work-in-progress Used by openshift-ci bot.
#15014 opened Aug 19, 2026 by ggbecker Member • Draft 0.1.83
1
Support remote users in file_groupownership_home_directories rule STIG STIG Benchmark related.
#15008 opened Aug 18, 2026 by ggbecker Member Loading… 0.1.83
@Mab879
4
🔄 NIST 800-53 CIS Reference Update (2026-08-16) needs-ok-to-test Used by openshift-ci bot.
#15001 opened Aug 16, 2026 by github-actions Bot Loading… 0.1.83
2
Implement automation and checks for configured_firewalld_default_deny needs-ok-to-test Used by openshift-ci bot.
#14995 opened Aug 13, 2026 by pradeepkch6-ai Loading… 0.1.83
@Mab879
11
Refresh RPM lockfiles [SECURITY] ok-to-test Used by openshift-ci bot.
#14990 opened Aug 12, 2026 by red-hat-konflux-kflux-prd-rh02 Bot Loading…
1 task
2
macros: stop pam-auth-update reporting a conflict it resolves itself needs-ok-to-test Used by openshift-ci bot.
#14985 opened Aug 12, 2026 by 0intro Contributor Loading… 0.1.83
@Mab879
4
Refresh RPM lockfiles ok-to-test Used by openshift-ci bot.
#14959 opened Aug 4, 2026 by red-hat-konflux-kflux-prd-rh02 Bot Loading…
1 task
0.1.83
2
Add ACSC Essential Eight and ISM Official profiles for Ubuntu 22.04 and 24.04 do-not-merge/work-in-progress Used by openshift-ci bot. Highlight This PR/Issue should make it to the featured changelog. needs-ok-to-test Used by openshift-ci bot. needs-rebase Used by openshift-ci bot. New Profile Issues or pull requests related to new Profiles. Ubuntu Ubuntu product related.
#14821 opened Jun 24, 2026 by ndfivegn • Draft 0.1.83
4
controls/cis_debian13: Complete and correct section 1 controls ok-to-test Used by openshift-ci bot.
#14806 opened Jun 16, 2026 by israel-villar Contributor Loading…
@vojtapolasek
16
Add missing OCIL to PCI-DSS rules needs-ok-to-test Used by openshift-ci bot. pci-dss RHEL8 Red Hat Enterprise Linux 8 product related.
#14783 opened Jun 7, 2026 by eran132 Loading… 0.1.83
1
@Arden97
8
Add Debian 13 PAM support to existing rules needs-ok-to-test Used by openshift-ci bot.
#14781 opened Jun 5, 2026 by israel-villar Contributor Loading… 0.1.83
@Arden97
8
CMP-3628: fixed rule to allow kubelet to be unconfined CoreOS CoreOS product related. OpenShift OpenShift product related.
#14700 opened May 8, 2026 by vickeybrown Collaborator Loading… 0.1.83
@vojtapolasek
7
Update Konflux references ok-to-test Used by openshift-ci bot.
#14679 opened Apr 25, 2026 by red-hat-konflux-kflux-prd-rh02 Bot Loading…
1 task
@yuumasato
2
ProTip! Adding no:label will show everything without a label.