Issues

• 10_profiles.sql silently partial-hardens: no failure counter, unlike 20_/30_

  cloud-gov/cg-oracle-database-19c-stig-overlay#98 · Filter by author wz-gsa opened on Sep 29, 2026

• Docs: update runner README + Dockerfile to describe hardened base and ECR/Concourse provenance

  documentation
  cloud-gov/cg-oracle-database-19c-stig-overlay#94 · Filter by author pburkholder opened on Sep 23, 2026

• Epic: Rebuild the runner as a Cloud.gov hardened container (ubuntu-hardened base + scan/audit + Concourse)

  enhancement
  cloud-gov/cg-oracle-database-19c-stig-overlay#84 · Filter by author pburkholder opened on Sep 23, 2026

• control-layers.yml has no schema validation: out-of-enum and axis-confused set_by/verified_by values pass unchecked

  bugmaintenance
  cloud-gov/cg-oracle-database-19c-stig-overlay#80 · Filter by author pburkholder opened on Sep 21, 2026

• run-validation reports cannot be distinguished from stale ones: baked /profile baseline ref is never emitted

  cloud-gov/cg-oracle-database-19c-stig-overlay#79 · Filter by author pburkholder opened on Sep 18, 2026

• CI guard: fail when a skip_control id has no SQL assertion at the pinned baseline ref (3rd recurrence)

  cloud-gov/cg-oracle-database-19c-stig-overlay#78 · Filter by author pburkholder opened on Sep 17, 2026

• RDSADMIN profile not customer-remediable on RDS: disposition SV-270561/SV-270587 password-verify-function findings at overlay layer

  bug
  cloud-gov/cg-oracle-database-19c-stig-overlay#77 · Filter by author pburkholder opened on Sep 15, 2026

• Generate docs/RESPONSIBILITY.md tables from control_status.json (move status/generator into cg-overlay)

  documentationmaintenance
  cloud-gov/cg-oracle-database-19c-stig-overlay#58 · Filter by author pburkholder opened on Aug 26, 2026