carta

oscap(8) on Linux

The text 6d997e50e14f, as Debian 10 (Buster) shipped it.

OpenSCAP command line tool

Flags it lists

oscap(8) on Linux now