[Compliance] FAIL — OS Login required for VM SSH access (org policy)

[github-actions]

Compliance gap detected

Field	Value
Signal	os_login_required
Evidence	gcp_iam_posture
GCP project	project-2b1e7276-412a-4f3c-9d6
Detected	2026-03-23
PCI-DSS	8.2.1; 8.6.1
SOC 2	CC6.1
ISO 27001	A.5.16; A.8.2
ISO 42001	6.1.2

Next steps

1. Review the evidence artifact in evidence/gcp_iam_posture/latest.json
2. Remediate the finding in GCP or Google Workspace
3. Re-run the collector workflow to verify
4. Close this issue once the signal shows PASS

---

Opened automatically by the compliance workflow · Run 23445929524