CIS-Hardened CentOS 9 Images Built Entirely on WSL2

A developer created a pipeline that builds CIS Level 1 hardened CentOS 9 Stream golden images with PingAccess 8.3.5 and signed SBOM/VEX attestations, running entirely on Windows via WSL2 with nested KVM. The process uses Packer, QEMU, and Ansible to produce QCOW2 images. The build is split into two stages: base hardening and application provisioning, with a single build.sh script controlling each step.