List view

OL7: invalid link in the PCI-DSS table

Oracle LinuxOracle Linux product related.Oracle Linux product related.

triaged

Status: Open.

#13816 In ComplianceAsCode/content;

· vojtapolasek opened on Aug 26, 2025

Add new build option to generate ansible roles out of profile ansible playbooks

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

needs-rebaseUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 13831

#13831 In ComplianceAsCode/content;

· ggbecker opened on Aug 28, 2025

CMP-3566: Ensure a CLF exists and check for secure URLs

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14031

#14031 In ComplianceAsCode/content;

· yuumasato opened on Oct 21, 2025

CMP-3756: Configure MintMaker updates on RPM lockfiles

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14041

#14041 In ComplianceAsCode/content;

· yuumasato opened on Oct 24, 2025

Add Amazon Linux 2023 DISA STIG Profile

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

needs-rebaseUsed by openshift-ci bot.Used by openshift-ci bot.

New ProfileIssues or pull requests related to new Profiles.Issues or pull requests related to new Profiles.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14246

#14246 In ComplianceAsCode/content;

· Eric-Domeier opened on Dec 16, 2025

Add build-time test for ansible variable conflicts

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14347

#14347 In ComplianceAsCode/content;

· ggbecker opened on Jan 30, 2026

Patch ansible remediation for postfix_network_listening_disabled rule

AnsibleAnsible remediation update.Ansible remediation update.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14394

#14394 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 14, 2026

Fix podman test compatibility: remove hardcoded network backend

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14422

#14422 In ComplianceAsCode/content;

· Copilot opened on Feb 18, 2026

Use drop-ins file in /etc/login.defs.d/

AnsibleAnsible remediation update.Ansible remediation update.

BashBash remediation update.Bash remediation update.

OVALOVAL update. Related to the systems assessments.OVAL update. Related to the systems assessments.

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14438

#14438 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 23, 2026

SLE16 check permissions /usr/etc/ssh/sshd_config

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Update RuleIssues or pull requests related to Rules updates.Issues or pull requests related to Rules updates.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14439

#14439 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 23, 2026

Fix AIDE Database option deprecation

DebianDebian product related.Debian product related.

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

UbuntuUbuntu product related.Ubuntu product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14557

#14557 In ComplianceAsCode/content;

· Azim-Azizov opened on Mar 12, 2026

Update find-rule skill to look for sibling rules

Status: Open (in progress).

ComplianceAsCode/contentnumber 14530

#14530 In ComplianceAsCode/content;

· rhmdnd opened on Mar 4, 2026

Harden filter evaluation and command execution

InfrastructureOur content build systemOur content build system

Status: Open (in progress).

ComplianceAsCode/contentnumber 14591

#14591 In ComplianceAsCode/content;

· shawndwells opened on Mar 20, 2026

CMP-4040, CMP-4041: Add support for CEL based rules and profiles

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14597

#14597 In ComplianceAsCode/content;

· yuumasato opened on Mar 24, 2026

ocp4: Enable sshd distributed config to check sshd_config.d drop-ins

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14603

#14603 In ComplianceAsCode/content;

· sebrandon1 opened on Mar 27, 2026

Add postfix package requirement and audit retention controls to multiple profile controls

Status: Open (in progress).

ComplianceAsCode/contentnumber 14612

#14612 In ComplianceAsCode/content;

· Arden97 opened on Apr 2, 2026

Add NIST 800-53 Rev 5 control framework with OSCAL metadata and CIS mappings (Split per product)

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14648

#14648 In ComplianceAsCode/content;

· ggbecker opened on Apr 13, 2026

WIP: update RHEL 9 STIG to v2r8

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

HighlightThis PR/Issue should make it to the featured changelog.This PR/Issue should make it to the featured changelog.

RHEL9Red Hat Enterprise Linux 9 product related.Red Hat Enterprise Linux 9 product related.

STIGSTIG Benchmark related.STIG Benchmark related.

Update ProfileIssues or pull requests related to Profiles updates.Issues or pull requests related to Profiles updates.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14653

#14653 In ComplianceAsCode/content;

· vojtapolasek opened on Apr 15, 2026

Fix Ansible remediation for sshd rules

AnsibleAnsible remediation update.Ansible remediation update.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14655

#14655 In ComplianceAsCode/content;

· jan-cerny opened on Apr 15, 2026