CIS Level 2 Benchmark Support for Debian 12

[perf-adharap]

Hi ComplianceAsCode team,

Thank you for your excellent work on SCAP Security Guide and related benchmarks.

Are there any plans or timelines for supporting CIS Level 2 Server benchmarks for Debian 12 in the official SCAP Security Guide content?

Currently, I notice that the Debian 12 content exists but does not include any CIS profiles. Since CIS Level 2 benchmarks provide essential hardening guidance, having these profiles available in the upstream content would be highly valuable.

Could you please let us know:

• If there's any roadmap for this?
• If the community can help contribute to it?
• Any references or branches in progress?

Thank you again for maintaining this critical project.

Best regards, Ajit

[Mab879]

Debian 12 is a community supported product. I'm not aware of any plans to add this, but PRs are welcome.

[a-skr]

I intent to support some CIS benchmark, but starting with Debian 13

[pmjfontes]

This is part of this merged pull-request #13712 includes CIS profiles for Debian 12.