waive ensure_redhat_gpgkey_installed on CentOS Stream

We already unselect the rule for remediation, so it would make sense for it to fail scanning. Signed-off-by: Jiri Jaburek <[email protected]>
RHSecurityCompliance · Apr 18, 2024 · 26fbb56 · 26fbb56
1 parent bba95bf
commit 26fbb56
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/conf/waivers/30-permanent b/conf/waivers/30-permanent
@@ -62,6 +62,7 @@
 /hardening/.+/ensure_gpgcheck_local_packages
 /hardening/.+/ensure_gpgcheck_never_disabled
 /hardening/.+/ensure_gpgcheck_repo_metadata
+/hardening/.+/ensure_redhat_gpgkey_installed
     Match(rhel.is_centos(), sometimes=True)
 # Presumably not valid for CentOS
 /hardening/.+/ospp/enable_fips_mode