Open (Source) Security Content Automation Protocol (OpenSCAP) is an auditing tool that utilizes the Extensible Configuration Checklist Description Format (XCCDF). XCCDF is a standard way of expressing checklist content and defines security checklists.  IronBank is a groundbreaking central repository that contains authorized container images hardened to the US Department of Defense's exacting specifications.