Hi all, is anyone using or is it possible to use osquery to check sshd_config and ensure that only pubkey sign in is allowed and no password based auth?

you can use the augeas table (if augeas and lenses are installed) to parse and validate the config with osquery