-
![image](https://github.com/mitre/heimdall2/assets/2015821/e352b6a6-b743-48b8-af45-69872335b5a6)
multiply-nested groups only seem to show the immediate parent group's information. …
-
Hi,
I've been running the ssh-baseline for sometime and recently ran the CentOS 7 CIS-1 baseline and the `xccdf_org.cisecurity.benchmarks_rule_5.2.3_Ensure_SSH_LogLevel_is_set_to_INFO` control fail…
-
Hey @dudash - would like up date the pipeline to perform a CVE scan during the test stage.
Essentially need to run the following command:
`````
atomic scan --verbose ${image}
`````
e.g.
```…
-
#### Description of problem:
The `file_permissions_etc_audit_rulesd` rule check fails after remediating a machine with STIG profile and restarting it.
#### SCAP Security Guide Version:
a4e6221
…
-
Warnings about non-registered check systems introduced in
https://github.com/OpenSCAP/openscap/pull/1055
cannot be parsed by SCAP Workbench, which then produces bunch of warnings:
```
10:46:24
…
-
#### Description of problem:
AutoMatúš prints a message that suggests that I have selected a wrong profile. That's misleading, because even though there can be a situation that a rule hasn't been eva…
-
#### Description of problem:
I am running this on CentOS 8 / aarch64 (8.2.2004 (Core))
Benchmark URL: /usr/share/xml/scap/ssg/content/ssg-centos8-ds.xml
Bechmark ID: xccdf_org.ssgproject.content_…
-
- [X] I have ensured that I am running the latest release
- [X] The issue is repeatable
- [X] The issue has not already been reported
We are running SCC tool 5.2.1 and Vulnerator 6.1.9.
I cann…
-
## Overview
[Compliance Operator](https://github.com/openshift/compliance-operator) is a tool to validate that a cluster infrastructure complies with standard such as NIST SP 800-53, HIPAA or C…
-
# Abstract #
We propose broadening the scope of our community mandate to include XCCDF and other community-driven security automation standards initiatives interoperable with and/or closely-related t…