Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
cloudfoundry
/
bosh-linux-stemcell-builder
Public
Notifications
You must be signed in to change notification settings
Fork
120
Star
50
Code
Issues
12
Pull requests
8
Discussions
Actions
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Security and quality
Insights
Fix cis compliance stemcell issues
- #702
#702
Open
karthickaliappa
wants to merge 9 commits into
cloudfoundry:ubuntu-jammy
cloudfoundry/bosh-linux-stemcell-builder:ubuntu-jammy
from
karthickaliappa:fix-cis-compliance-stemcell-issues
karthickaliappa/bosh-linux-stemcell-builder:fix-cis-compliance-stemcell-issues
Copy head branch name to clipboard
Conversation
Commits
9
(9)
Checks
Files changed
Open
Fix cis compliance stemcell issues
#702
karthickaliappa
wants to merge 9 commits into
cloudfoundry:ubuntu-jammy
cloudfoundry/bosh-linux-stemcell-builder:ubuntu-jammy
from
karthickaliappa:fix-cis-compliance-stemcell-issues
karthickaliappa/bosh-linux-stemcell-builder:fix-cis-compliance-stemcell-issues
Copy head branch name to clipboard
Commits
Commits on Aug 3, 2026
Add CIS/STIG compliance hardening for sshd, sudo, and shell timeout
Show description for dbac968
karthickaliappa
committed
dbac968
View commit details
Copy full SHA for dbac968
Browse repository at this point
Update MaxStartups to 10:30:60 per CIS 5.1.18 benchmark recommendation
Show description for 602c2ec
karthickaliappa
committed
602c2ec
View commit details
Copy full SHA for 602c2ec
Browse repository at this point
Address automated CodeRabbit review feedback
Show description for 7936f44
karthickaliappa
committed
7936f44
View commit details
Copy full SHA for 7936f44
Browse repository at this point
Commits on Aug 6, 2026
Address CodeRabbit review feedback for sudoers and spec tests
karthickaliappa
committed
a38f56b
View commit details
Copy full SHA for a38f56b
Browse repository at this point
Add CIS benchmark rule annotations to stemcell hardening stages and specs
Show description for a43a7d5
karthickaliappa
committed
a43a7d5
View commit details
Copy full SHA for a43a7d5
Browse repository at this point
Ignore whitespace-prefixed comments in !use_pty spec check
Show description for 6b93fb9
karthickaliappa
committed
6b93fb9
View commit details
Copy full SHA for 6b93fb9
Browse repository at this point
Normalize scanned MaxStartups SSH lines with strip in spec assertion
Show description for bb4de49
karthickaliappa
committed
bb4de49
View commit details
Copy full SHA for bb4de49
Browse repository at this point
Commits on Aug 7, 2026
Address reviewer feedback on stage comments and sudoers setup
karthickaliappa
committed
9f524a2
View commit details
Copy full SHA for 9f524a2
Browse repository at this point
Revert changes to bosh_sudoers/apply.sh to keep file in original state
karthickaliappa
committed
df4787e
View commit details
Copy full SHA for df4787e
Browse repository at this point
You can’t perform that action at this time.