Add Compliance Workflow (#219)

Co-authored-by: Matt Fernandez <matferna@matferna-mac.lab.cheeseburgia.com>
Co-authored-by: Chris Edillon <67980205+jce-redhat@users.noreply.github.com>
This commit is contained in:
Matthew Fernandez
2025-05-01 15:46:06 -06:00
committed by GitHub
parent 3400e73675
commit 7cfb27600f
10 changed files with 221 additions and 13 deletions

15
linux/disa_stig.yml Normal file
View File

@@ -0,0 +1,15 @@
---
- name: Apply compliance profile
hosts: "{{ _hosts | default(omit) }}"
become: true
vars:
compliance_profile: undef
tasks:
- name: Check os type
ansible.builtin.assert:
that: "ansible_os_family == 'RedHat'"
- name: Run Compliance Profile
ansible.builtin.include_role:
name: "demo.compliance.rhel{{ ansible_distribution_major_version }}STIG"