#OpenSCAP
LightNews LightNews
hugovalters.bsky.social
Run OpenSCAP CIS Level 2 in CI and fail builds on high-severity rule hits. oscap evaluates XCCDF/OVAL, emits ARF+HTML. #openscap #cis-benchmark #ci-cd https://www.valtersit.com/vault/enforce-cis-benchmark-via-openscap-in-ci-pipeline-beb870/
Enforce CIS Benchmark via OpenSCAP in CI Pipeline
www.valtersit.com
November 2, 2026 at 9:40 PM
Red Hat OpenSCAP to NIST 800-53 Mapping: Which Fixes Still Need Sign-Off — https://aicybercheck.com/blog/red-hat-openscap-to-nist-800-53-mapping-which-fixes-still-need-sign-off.php
Red Hat OpenSCAP to NIST 800-53 Mapping: Which Fixes Still Need Sign-Off
October 29, 2026 at 10:21 PM
hugovalters.bsky.social
Deploy CIS Control 7 continuous vuln scanning with OpenSCAP: one command evaluates the CIS Benchmark profile, probing files, packages, sysctl, and services, outputting ARF XML for ingestion. https://www.valtersit.com/vault/deploy-cis-control-7-continuous-vulnerability-scanning-with--a320d7/
Deploy CIS Control 7 continuous vulnerability scanning with OpenSCAP profile
www.valtersit.com
November 2, 2026 at 6:40 PM
almalinux.org
Nobody has ever said “I can’t wait to check 439 STIG requirements by hand.”

@tuxcare.bsky.social upstreamed an AlmaLinux OS 9 STIG profile to ComplianceAsCode so OpenSCAP does the tedium.

Test on a VM first—your SSH access will thank you! almalinux.org/blog/2026-10...
DISA STIG Automation for AlmaLinux OS 9
Hello AlmaLinux community! At TuxCare, we’ve contributed free DISA STIG automation for AlmaLinux OS 9 to the ComplianceAsCode project, and the maintainers merged it on October 20, 2026. That means…
almalinux.org
November 2, 2026 at 6:04 PM
packetstorm.bsky.social
OpenSCAP Libraries 1.4.6 https://packetstorm.news/files/237246
October 23, 2026 at 11:32 PM
benchmarkauthority.org
Term of the day: OpenSCAP

OpenSCAP is an open-source utility that checks a computer system against published security rules to see whether it is configured securely and whether it has known vulnerabilities...

Full definition: benchmarkauthority.org/glossary/openscap

#CloudSecurity #compliance
OpenSCAP. OpenSCAP is an open-source utility that checks a computer system against published security rules to see whether it is configured securely and whether it has known vulnerabilities. It reads standardized security content and reports where a system does or does not match the expected secure state. Producing a report is a point-in-time assessment; it does not by itself fix the issues it finds.
October 21, 2026 at 3:09 PM
euvd-bot.bsky.social
🚨 EUVD-2026-107542
📊 6.1/10

📝 A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading t...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-107542

#cybersecurity #infosec #cve #euvd
October 21, 2026 at 9:01 PM
packetstorm.bsky.social
OpenSCAP Libraries 1.4.5 https://packetstorm.news/files/235363
October 13, 2026 at 6:16 PM
bahashaqra.bsky.social
A walk through of how to build an industry grade automated compliance auditing system – from scan to notification. #oscap #OpenSCAP #CIS #Compliance #Auditing #VulnerabilityAssessment #Automation

Centralized Linux multi-server compliance auditing automation
drive.proton.me/urls/N1FB156...
Centralized Linux multi-server compliance auditing automation
October 10, 2026 at 9:11 AM
hugovalters.bsky.social
OpenSCAP + SSG runs CIS Level 2 XCCDF/OVAL checks mapped to NIS2 Art 21 controls, emitting ARF/HTML evidence per rule on RHEL/Rocky/Ubuntu 9. https://www.valtersit.com/vault/openscap-profile-scan-against-nis2mapped-cis-benchmark-ce6073/ #nis2 #openscap #compliance
OpenSCAP Profile Scan Against NIS2-Mapped CIS Benchmark
www.valtersit.com
September 28, 2026 at 10:00 AM
hugovalters.bsky.social
Automate OpenSCAP remediation on RHEL 9: run `oscap xccdf eval --results arf.xml`, then `oscap xccdf generate fix --fix-type ansible` to produce a playbook that applies all failed rule fixes,

https://www.valtersit.com/vault/remediate-openscap-findings-automatically-with-ansible-playb-9a1f18/
August 14, 2026 at 1:21 PM
rahulporuri.mastodon.social.ap.brid.gy
TIL in-toto and OpenSCAP
Tools that enforce integrity of software supply chain
August 4, 2025 at 9:08 AM
tom-doerr.bsky.social
Provides step-by-step instructions for hardening Linux production systems using OpenSCAP and compliance standards like CIS, STIG, and NIST.
Screenshot of the repository
July 23, 2026 at 10:05 PM
stephane-robert.bsky.social
Je viens de publier une box vagrant Ubuntu intégrant OpenScap, Lynis et ssh-audit à des fins de tester du code d'infra pour du durcissement. Je l'utilise dans le développement de roles Ansible.
app.vagrantup.com/stephrobert/...
blog.stephane-robert.info/post/ansible...
#DevOps
Durcissez vos rôles Ansible avec OpenScap | Stéphane ROBERT
Voyons comment hardener (durcir) la configuration de l'OS et des middleware avec l'aide d'OpenScap
blog.stephane-robert.info
December 14, 2023 at 2:55 PM
stephane-robert.bsky.social
Que pensez-vous de l'idée de fournir une box vagrant/kvm intégrant les outils de durcissement :
- openscap
- lynis
- ssh-audit
Vous voyez d'autres produits à intégrer ?
#DevOps #DevSecOps
December 13, 2023 at 1:18 PM
ginkqz.bsky.social
OpenSCAP 😍
Trop pratique (en tout cas pour une partie de ce durcissement)
February 18, 2026 at 10:00 PM
ytroncal.bsky.social
SSH Hardening Made Easy with OpenSCAP dev.to/sebos/ssh-ha...
SSH Hardening Made Easy with OpenSCAP
Learn how to enhance the security of your SSH server using OpenSCAP, an open-source security automation tool.
dev.to
January 18, 2025 at 8:36 PM
pdr2002.bsky.social
Strengthening #Linux Security by Auditing with #OpenSCAP | Linux Journal www.linuxjournal.com/content/stre... via @linuxjournal
Strengthening Linux Security by Auditing with OpenSCAP | Linux Journal
www.linuxjournal.com
April 24, 2024 at 6:35 AM
alexandre.brianceau.fr
Auditing CIS Benchmarks is pretty easy (~free): run openscap CIS profile or CIS CSAT tool: ✅ done! However, deploying them are VERY HARD.

Sure, openscap -> ansible playbook is streamlined, but you get stuck in the loop "sec audit, ops remediate (if available)". How about continuously automating it?
rudder.io Rudder @rudder.io · Jan 30
CIS Benchmarks™:
❌ Not just endless spreadsheets
❌ Not just audits
❌ Not just pain

In this article we explain how to implement CIS Benchmarks™ without breaking prod nor spilling blood:
✅ 3 clear steps
✅ Progressive rollout
✅ From audit to enforcement with Rudder

🔗 www.rudder.io/blog/steps-i...
Visual for our latest article showing the 3-step process for implementing CIS Benchmarks with Rudder
January 31, 2026 at 5:14 AM
linux.activitypub.awakari.com.ap.brid.gy
Automating OpenSCAP Scans via Docker CLI Introduction Continue reading on Medium »

https://medium.com/@eren.c.uysal/automating-openscap-scans-via-docker-cli-719304a72f1d?source=rss------technology-5

#technology #tech #opensuorce #automation #linux

Result Details
Automating OpenSCAP Scans via Docker CLI
Introduction
medium.com
May 11, 2025 at 8:01 PM
blueteamjk.bsky.social
OpenSCAP is still in use, especially for DISA STIG in Linux.

It's more of a lost opportunity than anything. It used to be that OpenSCAP and OpenVMS was the bar, and many vuln scanners supported it. As its now all fallen wayside, None of the new NG vulnerability suites are interoperable.
June 17, 2025 at 9:06 PM
theroundedman.bsky.social
Un influencer con millones de seguidores acaba de recomendar openscap como herramienta de defensa "poderosa". Ahora se que no se ha mirado la herramienta y solo pone cosas de oídas o de AIdas. Sin ficheros con políticas de hardening complementarias no sirve de nada. Y no dice de dónde bajarlas...
August 5, 2025 at 8:59 PM
packetstorm.bsky.social
OpenSCAP Libraries 1.4.4 https://packetstorm.news/files/218651
April 9, 2026 at 9:01 PM
packetstorm.bsky.social
OpenSCAP Libraries 1.4.3 https://packetstorm.news/files/211935
November 24, 2025 at 8:55 PM
packetstorm.bsky.social
OpenSCAP Libraries 1.3.13 https://packetstorm.news/files/211595
November 13, 2025 at 6:56 PM