GitHub repository: nickanderson/cfengine-packages-allowlist
Description: Inventory non-compliance and optionally enforce a list of allowed packages.