Skip to content

Pull requests: ComplianceAsCode/content

New pull request New
37 Open 11,373 Closed
37 Open 11,373 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Update OL8 stig profile to DISA STIG OL8 V2R9 Oracle Linux Oracle Linux product related. STIG STIG Benchmark related.
#14945 opened Jul 29, 2026 by mrkanon Contributor Loading… 0.1.82
1
Update OL9 stig profile to DISA STIG OL9 V1R6 Oracle Linux Oracle Linux product related. STIG STIG Benchmark related.
#14944 opened Jul 29, 2026 by mrkanon Contributor Loading… 0.1.82
1
CMP-4445: Add rule ensure all cpu vulnerabilities are mitigated cis ocp virt 6.3 needs-ok-to-test Used by openshift-ci bot.
#14942 opened Jul 28, 2026 by taimurhafeez Contributor Loading…
1
CMP-4446: Add manual rule kubevirt-disable-intel-txt (CIS OCP-Virt 5.1) needs-ok-to-test Used by openshift-ci bot. OpenShift OpenShift product related.
#14941 opened Jul 27, 2026 by taimurhafeez Contributor Loading…
1
CMP-4440: Add manual rule kubevirt-restrict-cross-datavolume-cloning (CIS OCP-Virt 3.1) needs-ok-to-test Used by openshift-ci bot. OpenShift OpenShift product related.
#14940 opened Jul 27, 2026 by taimurhafeez Contributor Loading…
1
CMP-4439: Add manual rule kubevirt-restrict-update-access-to-cdi-cr (CIS OCP-Virt 1.14) needs-ok-to-test Used by openshift-ci bot. OpenShift OpenShift product related.
#14939 opened Jul 27, 2026 by taimurhafeez Contributor Loading…
1
CMP-4438: Add manual rule kubevirt-restrict-vm-cluster-instance-preference-types (CIS OCP-Virt 1.13) needs-ok-to-test Used by openshift-ci bot. OpenShift OpenShift product related.
#14938 opened Jul 27, 2026 by taimurhafeez Contributor Loading…
1
CMP-4437: Add manual rule kubevirt-restrict-vnc-access-to-workloads(CIS OCP-Virt 1.12)) ok-to-test Used by openshift-ci bot. OpenShift OpenShift product related.
#14937 opened Jul 27, 2026 by taimurhafeez Contributor Loading…
5
CMP-4436: Add manual rule kubevirt-restrict-exec-access-to-pods (CIS-OCP-Virt 1.11) needs-ok-to-test Used by openshift-ci bot. OpenShift OpenShift product related.
#14936 opened Jul 27, 2026 by taimurhafeez Contributor Loading…
1
CMP-4513: Add cis-vm-extension-node profile with nested-virtualization rule (CIS OCP-Virt 6.1) OpenShift OpenShift product related.
#14930 opened Jul 24, 2026 by Vincent056 Contributor Loading…
4
CMP-4434: Add manual rule kubevirt-use-multi-network-policies CIS OCP-Virt 4.3 ok-to-test Used by openshift-ci bot. OpenShift OpenShift product related.
#14928 opened Jul 24, 2026 by taimurhafeez Contributor Loading…
3 tasks
3
SLE login.defs drop-in configuration fixes Ansible Ansible remediation update. Bash Bash remediation update. OVAL OVAL update. Related to the systems assessments. SLES SUSE Linux Enterprise Server product related.
#14925 opened Jul 24, 2026 by teacup-on-rockingchair Contributor Loading… 0.1.82
@jan-cerny
24
CMP-4435: Add manual rule kubevirt-restrict-migration-tools-access for CIS OCP-Virt 1.10 needs-ok-to-test Used by openshift-ci bot. OpenShift OpenShift product related.
#14920 opened Jul 23, 2026 by taimurhafeez Contributor Loading…
5
CMP-4432: Add secondary-network CEL rules for CIS OCP-Virt 4.1/4.2 (SR-IOV + NAD split) OpenShift OpenShift product related.
#14919 opened Jul 23, 2026 by Vincent056 Contributor Loading…
2
CMP-4429: Add per-VirtualMachine CEL rules for CIS OCP-Virt 2.1/3.2/3.3 OpenShift OpenShift product related.
#14918 opened Jul 23, 2026 by Vincent056 Contributor Loading…
2
CMP-4426: Add HyperConverged CEL rules for CIS OCP-Virt 1.4/1.6/1.7 OpenShift OpenShift product related.
#14917 opened Jul 23, 2026 by Vincent056 Contributor Loading…
3
CMP-4447: Fix the five shipped CIS OCP-Virt CEL rules (false positives and eval errors) OpenShift OpenShift product related.
#14916 opened Jul 23, 2026 by Vincent056 Contributor Loading…
2
Add support for SLE 16.1 release package do-not-merge/work-in-progress Used by openshift-ci bot.
#14915 opened Jul 23, 2026 by teacup-on-rockingchair Contributor • Draft
1
Add ACSC Essential Eight and ISM Official profiles for Ubuntu 22.04 and 24.04 do-not-merge/work-in-progress Used by openshift-ci bot. Highlight This PR/Issue should make it to the featured changelog. needs-ok-to-test Used by openshift-ci bot. needs-rebase Used by openshift-ci bot. New Profile Issues or pull requests related to new Profiles. Ubuntu Ubuntu product related.
#14821 opened Jun 24, 2026 by ndfivegn • Draft 0.1.82
4
CMP-4338: Updated the audit rules to properly handle the RHCOS4 audit system config ok-to-test Used by openshift-ci bot. OpenShift OpenShift product related.
#14812 opened Jun 19, 2026 by abushkin-redhat Collaborator Loading… 0.1.82
@yuumasato
32
controls/cis_debian13: Complete and correct section 1 controls needs-ok-to-test Used by openshift-ci bot.
#14806 opened Jun 16, 2026 by israel-villar Contributor Loading…
@vojtapolasek
7
nist_sync: export NIST 800-53 Rev 5 controls to Gemara format do-not-merge/work-in-progress Used by openshift-ci bot.
#14797 opened Jun 12, 2026 by ggbecker Member • Draft 0.1.82
5
Add missing OCIL to PCI-DSS rules needs-ok-to-test Used by openshift-ci bot. pci-dss RHEL8 Red Hat Enterprise Linux 8 product related.
#14783 opened Jun 7, 2026 by eran132 Loading… 0.1.82
1
@Arden97
8
Add Debian 13 PAM support to existing rules needs-ok-to-test Used by openshift-ci bot. needs-rebase Used by openshift-ci bot.
#14781 opened Jun 5, 2026 by israel-villar Contributor Loading… 0.1.82
@Arden97
8
CMP-3628: fixed rule to allow kubelet to be unconfined CoreOS CoreOS product related. OpenShift OpenShift product related.
#14700 opened May 8, 2026 by vickeybrown Collaborator Loading… 0.1.82
@vojtapolasek
5
ProTip! Adding no:label will show everything without a label.