Check that the following command verifies that all disks are encrypted

oc get machineset --all-namespaces -o json | jq '[.items[] | select(.spec.template.spec.providerSpec.value.osDisk.managedDisk.diskEncryptionSet.id != null) | .metadata.name]'

Verify the rule content/applications/openshift/integrity/crypto/azure_disk_encryption_enabled