ComplianceAsCode/content resource

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2791 stars · 819 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A collection of machine-readable security policy content for platforms like RHEL, Fedora, Ubuntu, and products like Firefox, expressed in SCAP (XCCDF, OVAL), Ansible, Bash, and CEL formats. It enables automated compliance scanning and remediation against standards such as PCI-DSS, STIG, and OSPP.

Use cases

• scan linux servers for compliance with pci-dss or stig
• generate ansible playbooks to harden a system
• remediate security configuration drift with bash scripts
• produce scap data streams for compliance auditing
• check kubernetes cluster compliance with cel policies
• automate security baseline enforcement across a fleet

When to choose

• you need standardized SCAP/XCCDF compliance content for common Linux distributions
• you want automated remediation playbooks for security baselines
• you must meet regulatory profiles like PCI-DSS, STIG, or OSPP

When to avoid

• you need a scanning engine itself rather than content (use OpenSCAP or similar)
• you need compliance content for platforms not covered by the project
• you want a point-and-click compliance dashboard

Facets

dataset · maturity active

security configuration-management developer-tools security legal self-hosted cloud scap xccdf oval security-hardening compliance-automation ansible-playbooks stig pci-dss openscap devops automation linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ComplianceAsCode/content")