OpenScap

Commands

List profile:

oscap info \
  --profiles /usr/share/xml/scap/ssg/content/ssg-rhel8-xccdf.xml

Start scan with CIS profile (Default: lvl2):

oscap xccdf eval \
  --profile cis \
  --report report.html \
  /usr/share/xml/scap/ssg/content/ssg-rhel8-xccdf.xml

List files of scap-security-guide:

rpm -ql scap-security-guide