It would be nice if lynis would gather (and report in the portal/reports) information about user-accounts:

• Expired or soon to expire passwords (passwd -e)
• Locked accounts (passwd -S )
• Expired accounts (chage -E / chage -l )

I found some findings from Scoutsuite scan on my personal account pertaining to following rules :-

1. Inline group Policy Allows Non STS Action
2. Inline role Policy Allows Non STS Action
3. Inline user Policy Allows Non STS Action
4. Managed Policy Allows Non STS Action

I checked the rationale and it gives the following detail.

**Description**
This configuration goes against or

There are at least two more security relevant headers that we should test for and produce judgements on:

• Cross-Origin-Opener-Policy
• Cross-Origin-Embedder-Policy

More resources:

• https://hacks.mozilla.org/2020/07/safely-reviving-shared-memory/
• https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cross-Origin-Opener-Policy
• https://developer.mozilla.org/en-US/docs/Web/HT

Now that we want to give more value to it, it would be nice if we could break down the areas of development on the project based on conventional commits.

Things we could have there

• Stats per scope
• Stats per action
• Stats per author
• Time range selector for the statistics