re-enable stig

This commit is contained in:
Audiobuzz
2026-06-19 04:22:03 +00:00
parent 77416a8e37
commit 18b47ca5b0
+1 -1
View File
@@ -63,7 +63,7 @@ env:
# DISA STIG hardening (OpenSCAP + SSG, diskless/UKI/kiosk tailoring). Report-only # DISA STIG hardening (OpenSCAP + SSG, diskless/UKI/kiosk tailoring). Report-only
# in CI: the scan + deviations report are published as artifacts; the build is # in CI: the scan + deviations report are published as artifacts; the build is
# never failed on score. Set "false" to skip hardening (boot/secure-path bench). # never failed on score. Set "false" to skip hardening (boot/secure-path bench).
ENABLE_STIG: "false" ENABLE_STIG: "true"
# =========================================================================== # ===========================================================================
# TEMPORARY: 802.1X + MACsec are DISABLED for this build (rd.dot1x=0) so the # TEMPORARY: 802.1X + MACsec are DISABLED for this build (rd.dot1x=0) so the
# UKI / rootfs / NVMe-oF boot path can be validated on an OPEN switch port. # UKI / rootfs / NVMe-oF boot path can be validated on an OPEN switch port.