All pull requests

Pull requests

• Don't follow symlinks in file_permission_user_init_files(_root)

  AnsibleBash
  #15138·Mab879 opened Sep 22, 2026·

  ·

  · 0.1.83
  2

• SLE16 sudo rules transactional related patches

  AnsibleBashOVALSLESTest Suite
  #15131·teacup-on-rockingchair opened Sep 20, 2026·

  ·

  · 0.1.83
  16

  

• Add Zabbix agent rules

  needs-ok-to-test
  #15128·israel-villar opened Sep 16, 2026·

  ·
  4

  

• Add Tripwire integrity rules

  needs-ok-to-test
  #15127·israel-villar opened Sep 16, 2026·

  ·
  4

  

• Implement contest-atex-testingfarm based contest-all Packit test

  #15126·comps opened Sep 15, 2026·

  ·

  · 0.1.83
  8

  

• Improve aide rules for sle16/suse platform

  AnsibleBashSLESUpdate Rule
  #15123·teacup-on-rockingchair opened Sep 14, 2026·

  ·

  · 0.1.83
  19

• Add gnome rules opensuse leap16

  do-not-merge/work-in-progress
  #15122·teacup-on-rockingchair opened Sep 14, 2026·

  ·
  2

• 🔄 NIST 800-53 CIS Reference Update (2026-09-13)

  ok-to-test
  #15121·github-actions[bot] opened Sep 13, 2026·

  ·
  10

  

• nist_sync: split ControlCatalogs by NIST family

  Infrastructure
  #15115·ggbecker opened Sep 10, 2026·

  ·

  · 0.1.83
  1

• Add support for OpenSUSE Leap 16

  New ProductUpdate Template
  #15111·teacup-on-rockingchair opened Sep 10, 2026·

  ·

  · 0.1.83
  4

  

• [template] Allow oval template of audit_rules_dac_modification to check both auid>=1000 auid=0 exist

  needs-ok-to-test
  #15107·alanmcanonical opened Sep 9, 2026·

  ·
  7

  

• Fix wireless_disable_interface remediations to work multiple interfaces

  needs-ok-to-test
  #15106·alanmcanonical opened Sep 9, 2026·

  ·

  · 0.1.83
  11

  

• Refresh RPM lockfiles [SECURITY]

  ok-to-test
  #15102·red-hat-konflux-kflux-prd-rh02[bot] opened Sep 8, 2026·

  ·
  2

• Update Konflux references

  ok-to-test
  #15098·red-hat-konflux-kflux-prd-rh02[bot] opened Sep 5, 2026·

  ·
  2

• Add CIS Level 1 profiles for Ubuntu 26.04

  CISHighlightneeds-ok-to-testNew ProfileUbuntu
  #15097·realstuffie opened Sep 5, 2026·

  ·

  · 0.1.83
  26

  

• Refresh RPM lockfiles

  ok-to-test
  #15091·red-hat-konflux-kflux-prd-rh02[bot] opened Sep 4, 2026·

  ·
  2

• Add step to build a "production" fedora build on pull requests

  #15090·Mab879 opened Sep 3, 2026·

  ·

  · 0.1.83
  11

  

• CMP-4521: Fix HyperShift Hosted Cluster detection using controlPlaneTopology

  #15085·yuumasato opened Sep 3, 2026·

  ·
  

• Align audit_rules_sudoers_d remediation with DISA STIG content

  do-not-merge/work-in-progressRHELSTIG
  #15060·ggbecker opened Aug 26, 2026·

  ·

  · 0.1.83
  1

  5

  

• SLE fixes for sshd distributed config for approved macs and ciphers rules

  AnsibleBashOVALSLESTest Suite
  #15021·teacup-on-rockingchair opened Aug 20, 2026·

  ·

  · 0.1.83
  1

  8

  

• Implement automation and checks for configured_firewalld_default_deny

  needs-ok-to-test
  #14995·pradeepkch6-ai opened Aug 13, 2026·

  ·

  · 0.1.83
  11

  

• macros: stop pam-auth-update reporting a conflict it resolves itself

  needs-ok-to-test
  #14985·0intro opened Aug 12, 2026·

  ·

  · 0.1.83
  4

  

• Add ACSC Essential Eight and ISM Official profiles for Ubuntu 22.04 and 24.04

  do-not-merge/work-in-progressHighlightneeds-ok-to-testneeds-rebaseNew ProfileUbuntu
  #14821·ndfivegn opened Jun 24, 2026·

  ·

  · 0.1.83
  4

• Add missing OCIL to PCI-DSS rules

  needs-ok-to-testneeds-rebasepci-dssRHEL8
  #14783·eran132 opened Jun 7, 2026·

  ·

  · 0.1.83
  1

  9

  

• Add Debian 13 PAM support to existing rules

  needs-ok-to-test
  #14781·israel-villar opened Jun 5, 2026·

  ·

  · 0.1.83
  11