From 18b47ca5b08f8054dfff9ec1a4060263a1076a16 Mon Sep 17 00:00:00 2001 From: Audiobuzz Date: Fri, 19 Jun 2026 04:22:03 +0000 Subject: [PATCH] re-enable stig --- .gitea/workflows/gitea-main-ci.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitea/workflows/gitea-main-ci.yaml b/.gitea/workflows/gitea-main-ci.yaml index aeb92c0..f521a62 100644 --- a/.gitea/workflows/gitea-main-ci.yaml +++ b/.gitea/workflows/gitea-main-ci.yaml @@ -63,7 +63,7 @@ env: # DISA STIG hardening (OpenSCAP + SSG, diskless/UKI/kiosk tailoring). Report-only # in CI: the scan + deviations report are published as artifacts; the build is # never failed on score. Set "false" to skip hardening (boot/secure-path bench). - ENABLE_STIG: "false" + ENABLE_STIG: "true" # =========================================================================== # TEMPORARY: 802.1X + MACsec are DISABLED for this build (rd.dot1x=0) so the # UKI / rootfs / NVMe-oF boot path can be validated on an OPEN switch port.