-
Current alpine image is not compliant with CIS Docker Community Edition Benchmark v1.1.0. Section **4 - Container Images and Build File**
Please refer to [docker/docker-bench-security](https://github…
-
# Goal
Provide tWAS VM Images Azure Marketplace offering for customers to create a customized tWAS Cluster/Single Server env on their own.
# User experience
- Customer searches for the VM Ima…
-
One of the CIS Basic controls states:
> Utilize a Security Content Automation Protocol (SCAP) compliant configuration monitoring system to verify all security configuration elements, catalog approv…
-
**What steps did you take and what happened:**
* Installed trivy-operator via the helm chart
* Printed out the CIS compliance results:
```bash
$ kubectl get compliance cis -o=jsonpath='{.statu…
-
CIS level 1 settings of authentication required for single user mode on RHEL 8 is different as compared to older RHEL versions. rules/ensure_authentication_required_for_single_user_mode.pp with below …
-
[RFC 6749](https://tools.ietf.org/html/rfc6749), which defines the OAuth2 framework, states OAuth endpoints must accept `application/x-www-form-urlencoded` and may return `application/json`. Currently…
-
Hello,
I was wondering if anybody has implemented CIS standards in netshot.
If yes, is possible to share the compliance scripts?
-
### Is your feature request related to a problem? Please describe.
We are trying to get our systems as compliant with CIS Hardening profiles as possible. The tool we are using is a Puppet module call…
-
Some CIS benchmarks require you to set the noexec flag on /tmp. Since the program will keep temporary files (and some executables for pip) in a tmpdir in /tmp, this will cause the program to exit non-…
-
### Goal
TODO
Fleet currently supports policies, which are essentially saved queries that return output if successful, or nothing. Fleet considers it a success if there is output, a failure otherw…