scap-security-guide
reference corpus · status live · domain SEC (Security and vulnerabilities) · lane A · refresh pinned · tags GLOBAL · HARDENING · CIS-BENCHMARKS · STIG · COMPLIANCE · SCAP
What an agent uses it for
security
curl -fsSLO https://raw.githubusercontent.com/xerj-org/xerj/corpus-hub/tools/xerj-code/hub/scap-security-guide.jsonxerj corpus add --from ./scap-security-guide.jsonxerj corpus index scap-security-guide then xerj code scap-security-guide "your question"Needs the xerj CLI and a local node running; the copy prompt covers both, checks each step, and shows how to stop only the node you started. No shell: the MCP tool xerj_code_search with corpus: "scap-security-guide", once the corpus is indexed on the node.
Sources and pins
| source | pin | licence | size | review note |
|---|---|---|---|---|
| content | f0f3396f7066 | BSD-3-Clause | 65.2 MB / 13,746 files | Decoded LICENSE: opens 'SPDX license identifier: BSD-3-Clause' followed by the full standard BSD-3-Clause text (Red Hat, Inc.). GitHub's NOASSERTION was only the non-standard SPDX-prefix line, not a missing licence. Bundles US-gov public-domain DISA STIG XCCDF. |
65.2 MB across 13,746 files. Added 2026-10-13.
Rights
BSD-3-Clause. Redistribution permitted with attribution per the licence review. The review block records a human opening each licence file at the pin. Detector output is a hint, never the verdict.
Retrieval spot-check (G7)
Not yet spot-checked. Queries are pre-registered in the registry before grading.