List view

OL7: invalid link in the PCI-DSS table

Oracle LinuxOracle Linux product related.Oracle Linux product related.

triaged

Status: Open.

#13816 In ComplianceAsCode/content;

· vojtapolasek opened on Aug 26, 2025

Add new build option to generate ansible roles out of profile ansible playbooks

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 13831

#13831 In ComplianceAsCode/content;

· ggbecker opened on Aug 28, 2025

CMP-3566: Ensure a CLF exists and check for secure URLs

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14031

#14031 In ComplianceAsCode/content;

· yuumasato opened on Oct 21, 2025

CMP-3756: Configure MintMaker updates on RPM lockfiles

OpenShiftOpenShift product related.OpenShift product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14041

#14041 In ComplianceAsCode/content;

· yuumasato opened on Oct 24, 2025

Add Amazon Linux 2023 DISA STIG Profile

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

New ProfileIssues or pull requests related to new Profiles.Issues or pull requests related to new Profiles.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14246

#14246 In ComplianceAsCode/content;

· Eric-Domeier opened on Dec 16, 2025

Update Konflux references

ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14293

#14293 In ComplianceAsCode/content;

· red-hat-konflux-kflux-prd-rh02 opened on Jan 10, 2026

Update quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan:0.2 Docker digest to 2f3015a

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14311

#14311 In ComplianceAsCode/content;

· red-hat-konflux-kflux-prd-rh02 opened on Jan 17, 2026

Add build-time test for ansible variable conflicts

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14347

#14347 In ComplianceAsCode/content;

· ggbecker opened on Jan 30, 2026

Store plain login banner text in XCCDF Value

bugfixFixes to reported bugs.Fixes to reported bugs.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14371

#14371 In ComplianceAsCode/content;

· jan-cerny opened on Feb 9, 2026

Patch ansible remediation for postfix_network_listening_disabled rule

AnsibleAnsible remediation update.Ansible remediation update.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14394

#14394 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 14, 2026

Make sure not to run ansible procedure in check mode

AnsibleAnsible remediation update.Ansible remediation update.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14395

#14395 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 14, 2026

Remove nullok from common-auth on Ubuntu

STIGSTIG Benchmark related.STIG Benchmark related.

UbuntuUbuntu product related.Ubuntu product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14414

#14414 In ComplianceAsCode/content;

· mpurg opened on Feb 18, 2026

Fix sle16 pam options

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Update TemplateIssues or pull requests related to Templates updates.Issues or pull requests related to Templates updates.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14426

#14426 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 19, 2026

Update Ubuntu STIG rules for library file permissions

STIGSTIG Benchmark related.STIG Benchmark related.

UbuntuUbuntu product related.Ubuntu product related.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14428

#14428 In ComplianceAsCode/content;

· mpurg opened on Feb 19, 2026

Fix podman test compatibility: remove hardcoded network backend

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

needs-rebaseUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14422

#14422 In ComplianceAsCode/content;

· Copilot opened on Feb 18, 2026

Use drop-ins file in /etc/login.defs.d/

AnsibleAnsible remediation update.Ansible remediation update.

BashBash remediation update.Bash remediation update.

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

OVALOVAL update. Related to the systems assessments.OVAL update. Related to the systems assessments.

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14438

#14438 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 23, 2026

SLE16 check permissions /usr/etc/ssh/sshd_config

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Update RuleIssues or pull requests related to Rules updates.Issues or pull requests related to Rules updates.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14439

#14439 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 23, 2026

Add tftp package definition for sle platforms

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Update RuleIssues or pull requests related to Rules updates.Issues or pull requests related to Rules updates.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14444

#14444 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 23, 2026

Sle16 sshd lineinfile related fixes

AnsibleAnsible remediation update.Ansible remediation update.

BashBash remediation update.Bash remediation update.

OVALOVAL update. Related to the systems assessments.OVAL update. Related to the systems assessments.

SLESSUSE Linux Enterprise Server product related.SUSE Linux Enterprise Server product related.

Update TemplateIssues or pull requests related to Templates updates.Issues or pull requests related to Templates updates.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14458

#14458 In ComplianceAsCode/content;

· teacup-on-rockingchair opened on Feb 26, 2026

Parameterize SSH-related file paths via product properties (preserve current defaults)

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14445

#14445 In ComplianceAsCode/content;

· Smouhoune opened on Feb 23, 2026

Add a check for postquantum GPG key to RHEL 9 content

do-not-merge/work-in-progressUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Draft (not ready).

ComplianceAsCode/contentnumber 14475

#14475 In ComplianceAsCode/content;

· jan-cerny opened on Feb 27, 2026

Fix DISA alignment for configure_libreswan_crypto_policy and logind_session_timeout

Status: Open (in progress).

ComplianceAsCode/contentnumber 14477

#14477 In ComplianceAsCode/content;

· Arden97 opened on Feb 27, 2026

Parameterize SSH client configuration paths via product properties (preserve defaults)

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14449

#14449 In ComplianceAsCode/content;

· Smouhoune opened on Feb 24, 2026

Bump mikepenz/release-changelog-builder-action from 6.1.0 to 6.1.1

dependenciesPull requests that update a dependency filePull requests that update a dependency file

github_actionsPull requests that update GitHub Actions codePull requests that update GitHub Actions code

needs-ok-to-testUsed by openshift-ci bot.Used by openshift-ci bot.

Status: Open (in progress).

ComplianceAsCode/contentnumber 14515

#14515 In ComplianceAsCode/content;

· dependabot opened on Mar 2, 2026