This epic has been created based on discussion with thozza@redhat.com and on https://redhat-internal.slack.com/archives/C0235DZB0DT/p1757064170836629

The point is that currently list of SCAP profiles which are available through Osbuild seems to be hardcoded.
References:
https://github.com/osbuild/images/blob/main/data/distrodefs/distros.yaml
https://github.com/osbuild/images/blob/9f28896f96e04c8e00967737c0f41867a03aaf37/pkg/customizations/oscap/oscap.go#L17

This epic should track two things:
1. Update the osbuild so that in 9.7 zeroday there ships a version which allows this profile to be selected?
2. Establish a process or find a solution so that we do not meet this surprise in the future. I assume we can inform you in advance of new profiles, since you have rapid cadence of releases. Or the allowlist should be removed all together.