Check that the following command verifies that all disks are encrypted

oc get machineset --all-namespaces -o json | jq '[.items[] | select(.spec.template.spec.providerSpec.value.disks[0].encryptionKey.kmsKey.name != null) | .metadata.name]'

Verify the rule content/applications/openshift/integrity/crypto/gcp_disk_encryption_enabled