diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 66719cc..1ed140a 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -31,11 +31,11 @@ jobs: - name: Move Certificates and Input file shell: bash run: | - printf "%s" "${{ env.CA_FILE_BASE64_AA }}" > CA_FILE - printf "%s" "${{ env.CA_FILE_BASE64_AB }}" >> CA_FILE + echo "${{ env.CA_FILE_BASE64_AA }}" > CA_FILE + echo "${{ env.CA_FILE_BASE64_AB }}" >> CA_FILE base64 --decode CA_FILE > certificates/dod_CAs.pem - printf "%s" "${{ env.CERTIFICATE_KEY_FILE }}" > certificates/mongodb.pem - printf "%s" "${{ env.INSPEC_INPUTS }}" > spec/mongo-inspec-profile/inputs.yml + echo "${{ env.CERTIFICATE_KEY_FILE }}" > certificates/mongodb.pem + echo "${{ env.INSPEC_INPUTS }}" > spec/mongo-inspec-profile/inputs.yml - name: Run Packer Hardening run: | diff --git a/spec/ansible/mongo-stig-hardening-playbook.yml b/spec/ansible/mongo-stig-hardening-playbook.yml index 98a7732..2e8ad70 100644 --- a/spec/ansible/mongo-stig-hardening-playbook.yml +++ b/spec/ansible/mongo-stig-hardening-playbook.yml @@ -6,7 +6,7 @@ - role: mitre.yedit - role: mongoSTIG vars: - fips_mode: false + fips_mode: true enterprise_edition: true serial: 50 user: 0