macOS Security Compliance Files

What's Changed

• Added support for macOS 27, iOS 27, and visionOS 27
• Removed requirement for Ruby and AsciiDoctor
• Added Typst for PDF generation
• Added exit-code-based rule checks
• Added light and dark mode support to generated HTML guidance
• Added json output to the compliance script
• Added prerelease CIS Benchmark for macOS 27, and DISA STIG for macOS 27.
• Added initial support for Ubuntu and Red Hat Linux

Pull Requests

• mSCP 2.x refactor by @snoopy82481 in https://github.com/usnistgov/macos_security/pull/507
• Tweaks to initial 2.0 merge by @brodjieski in https://github.com/usnistgov/macos_security/pull/518
• Refactor baseline generator by @brodjieski in https://github.com/usnistgov/macos_security/pull/606
• Dev 2.0 fixes by @golbiga in https://github.com/usnistgov/macos_security/pull/610
• Dev 2.0 compliance script by @robertgendler in https://github.com/usnistgov/macos_security/pull/611
• Schema update to support 26.0 and other cleanup by @brodjieski in https://github.com/usnistgov/macos_security/pull/614
• Consolidated and Granular Profiles by @brodjieski in https://github.com/usnistgov/macos_security/pull/619
• Latest updates for 2.0 by @brodjieski in https://github.com/usnistgov/macos_security/pull/626
• Another round of 2.0 updates by @brodjieski in https://github.com/usnistgov/macos_security/pull/629
• Mapping, Localization and Admin Functions by @brodjieski in https://github.com/usnistgov/macos_security/pull/637
• SCAP, Compliance Script and Theme updates by @brodjieski in https://github.com/usnistgov/macos_security/pull/640
• Update dependencies and add JSON manifest for guidance generation by @brodjieski in https://github.com/usnistgov/macos_security/pull/661
• Add the default set of baselines by @brodjieski in https://github.com/usnistgov/macos_security/pull/665
• 2.0 README by @cocopuff2u in https://github.com/usnistgov/macos_security/pull/671
• Refactor structure and introduce RuleLibrary for querying rules by @brodjieski in https://github.com/usnistgov/macos_security/pull/682
• Update the logo and banner, add banner generator by @brodjieski in https://github.com/usnistgov/macos_security/pull/683
• Update project dependencies by @brodjieski in https://github.com/usnistgov/macos_security/pull/685
• Fix handling of supplementals in SCAP processing by @brodjieski in https://github.com/usnistgov/macos_security/pull/687
• Add python cooldown by @headmin in https://github.com/usnistgov/macos_security/pull/690
• Update acronyms.yaml by @hardstriker in https://github.com/usnistgov/macos_security/pull/693
• Refactor with CLI enhancements and author templates by @brodjieski in https://github.com/usnistgov/macos_security/pull/692
• Refactor baseline accessors and improve documentation processing by @brodjieski in https://github.com/usnistgov/macos_security/pull/694
• Update merge and sync script, add admin function by @brodjieski in https://github.com/usnistgov/macos_security/pull/698
• Add HHS references to MacSecurityRule class by @brodjieski in https://github.com/usnistgov/macos_security/pull/701
• Refactor admin tool and update schema for release preparation by @brodjieski in https://github.com/usnistgov/macos_security/pull/703
• Sync and merge VisionOS STIG rules by @brodjieski in https://github.com/usnistgov/macos_security/pull/704
• Update dependencies and improve workflows for 2.0 branch by @brodjieski in https://github.com/usnistgov/macos_security/pull/705
• Refactor enforcement models and update issue templates by @brodjieski in https://github.com/usnistgov/macos_security/pull/706
• Refactor collecting rules, improving performance for admin baselines, fix issue with missing baseline by @brodjieski in https://github.com/usnistgov/macos_security/pull/708
• feat: add --markdown-tree paginated output for static site generators by @smithjw in https://github.com/usnistgov/macos_security/pull/700
• Update to release strings and formatting, small fixes by @brodjieski in https://github.com/usnistgov/macos_security/pull/720
• Add BSI indigo 1.6 changes and fixes by @headmin in https://github.com/usnistgov/macos_security/pull/731
• Refactor logging, rules, and improve GitHub Actions workflows by @brodjieski in https://github.com/usnistgov/macos_security/pull/722
• Fix the supported OS table by @hardstriker in https://github.com/usnistgov/macos_security/pull/734
• chore(deps): bump pillow from 12.2.0 to 12.3.0 by @dependabot[bot] in https://github.com/usnistgov/macos_security/pull/741
• Refactor and fix various issues in RuleLibrary and container builds by @brodjieski in https://github.com/usnistgov/macos_security/pull/749
• fix: shell syntax for result by @brodjieski in https://github.com/usnistgov/macos_security/pull/750
• macOS 27, iOS 27, visionOS 27 by @robertgendler in https://github.com/usnistgov/macos_security/pull/751
• Update default behavior to 27.0 by @brodjieski in https://github.com/usnistgov/macos_security/pull/752
• Replace Ruby/AsciiDoctor with pure-Python based typst for PDF and HTML rendering by @headmin in https://github.com/usnistgov/macos_security/pull/763
• Escape CSV fields in compliance script audit log (RFC 4180) by @shammi-zentral in https://github.com/usnistgov/macos_security/pull/760
• Modified rule files by @robertgendler in https://github.com/usnistgov/macos_security/pull/754
• Add HHS and BZK columns and update shell check for CIS compliance by @brodjieski in https://github.com/usnistgov/macos_security/pull/757
• Update channeltimeout check and fix commands by @akegerreis in https://github.com/usnistgov/macos_security/pull/762
• Small changes, new rule by @robertgendler in https://github.com/usnistgov/macos_security/pull/765
• Remove unused EOL sentinel assignment by @robertgendler in https://github.com/usnistgov/macos_security/pull/769
• Fix custom enforcement_info merging and ODV replacement in BaseModel by @brodjieski in https://github.com/usnistgov/macos_security/pull/771
• Feature import export by @brodjieski in https://github.com/usnistgov/macos_security/pull/772
• Fix excluded rules in JSON manifest by @shin4141 in https://github.com/usnistgov/macos_security/pull/775
• STIGID updated for macos 27. by @akegerreis in https://github.com/usnistgov/macos_security/pull/774
• fix[ddm]: render ddm_info in guidance docs and merge shared ddm info by @brodjieski in https://github.com/usnistgov/macos_security/pull/776
• Updated Rules by @robertgendler in https://github.com/usnistgov/macos_security/pull/777
• Implement Basic Schema Changes to Support Linux by @amyatnist in https://github.com/usnistgov/macos_security/pull/779
• Allow Exit Codes To Be Used For Compliance Checking by @amyatnist in https://github.com/usnistgov/macos_security/pull/780
• Schema Update, ssh tty, and YAML linting by @robertgendler in https://github.com/usnistgov/macos_security/pull/782
• Map CIS Golden Gate 27 v1.0.0 and Tahoe 26 v2.0.0 benchmarks by @tonyyo11 in https://github.com/usnistgov/macos_security/pull/781
• perf: use libyaml loader and quiet the debug log sink by @brodjieski in https://github.com/usnistgov/macos_security/pull/778
• Dev 27 no more ruby by @golbiga in https://github.com/usnistgov/macos_security/pull/783
• Rule fixes and SCAP by @robertgendler in https://github.com/usnistgov/macos_security/pull/785
• Updated README with correct link to 800-219 by @hardstriker in https://github.com/usnistgov/macos_security/pull/786
• Add pre-release benchmark handling and update Dockerfile by @brodjieski in https://github.com/usnistgov/macos_security/pull/789
• Updated to use correct keys by @smithjw in https://github.com/usnistgov/macos_security/pull/792
• json output, declarative in excel, fixed key by @robertgendler in https://github.com/usnistgov/macos_security/pull/790
• Update container build process and improve shell configuration by @brodjieski in https://github.com/usnistgov/macos_security/pull/793
• chore: update project-words by @brodjieski in https://github.com/usnistgov/macos_security/pull/795
• mSCP 27.0 Update by @robertgendler in https://github.com/usnistgov/macos_security/pull/794

New Contributors

• @snoopy82481 made their first contribution in https://github.com/usnistgov/macos_security/pull/507
• @dependabot[bot] made their first contribution in https://github.com/usnistgov/macos_security/pull/741
• @shammi-zentral made their first contribution in https://github.com/usnistgov/macos_security/pull/760
• @shin4141 made their first contribution in https://github.com/usnistgov/macos_security/pull/775
• @amyatnist made their first contribution in https://github.com/usnistgov/macos_security/pull/779

Full Changelog: https://github.com/usnistgov/macos_security/compare/tahoe_rev3...release_27.0