Aqueduct
Compliance remediation content for Red Hat Enterprise Linux: Bash, Puppet, and Ansible, organized as one script per STIG finding.
I created Aqueduct to share DISA STIG remediation for Red Hat Enterprise Linux. The original project, on Fedora Hosted, set out to share system configuration content and the methods for synchronizing that content to systems management tools such as Red Hat Network Satellite.
The public repository is organized by tool and finding. Bash STIG scripts for RHEL 5 and RHEL 6 each stand alone, in production, in-development, and manual-check trees, so one finding can be audited or changed without the others. Puppet modules cover the RHEL 6 STIG. An Ansible role covers RHEL 6 SCAP Security Guide hardening. An RPM spec packages the content for installation. I wrote most of the Bash scripts. Shannon Mitchell contributed some of the RHEL 5 scripts and the RPM packaging.
The work is under GPL-2.0. The repository README describes Aqueduct as a historical project from 2011 to 2014, kept so the scripts remain public.