diff --git a/cfbs.json b/cfbs.json
index 178ec48..d265030 100644
--- a/cfbs.json
+++ b/cfbs.json
@@ -161,8 +161,8 @@
       "tags": ["security", "compliance", "experimental"],
       "repo": "https://github.com/nickanderson/cfengine-lynis",
       "by": "https://github.com/nickanderson",
-      "version": "3.1.3",
-      "commit": "dd645be54d7d9392b3ef7a5ab0038572070081c7",
+      "version": "3.1.6",
+      "commit": "c427b0cfd854204a39b3c5aaea907d498577c764",
       "subdirectory": "compliance-reports",
       "dependencies": ["compliance-report-imports", "lynis"],
       "steps": [
@@ -972,8 +972,8 @@
       "tags": ["security", "compliance"],
       "repo": "https://github.com/nickanderson/cfengine-lynis",
       "by": "https://github.com/nickanderson",
-      "version": "3.1.3",
-      "commit": "dd645be54d7d9392b3ef7a5ab0038572070081c7",
+      "version": "3.1.6",
+      "commit": "60b97c3e8784238d42ddb33532c7a86de7cde85d",
       "steps": [
         "copy policy/main.cf services/lynis/main.cf",
         "json cfbs/def.json def.json",
@@ -987,7 +987,7 @@
           "variable": "version",
           "label": "Lynis version",
           "question": "What version of Lynis should be used?",
-          "default": "3.1.3"
+          "default": "3.1.6"
         },
         {
           "type": "string",
@@ -1006,7 +1006,7 @@
           "variable": "archive_hash",
           "label": "Hash of the tarball",
           "question": "What is the hash of the tarball?",
-          "default": "bb51569c8f9e67bd2d2aa5cfcdd8e2d82726552b69fde4abddff9d991706f554"
+          "default": "0513f62ba5ab615c4333827b804237d58cf7bd623d09e1b4918d3fc85f08fc70"
         },
         {
           "type": "string",
@@ -1016,6 +1016,24 @@
           "label": "Hash type to verify",
           "question": "What hashing algorithm should be used to verify the Lynis script?",
           "default": "sha256"
+        },
+        {
+          "type": "string",
+          "namespace": "lynis",
+          "bundle": "globals",
+          "variable": "verify_signature",
+          "label": "Verify GPG signature",
+          "question": "Should the GPG signature of the tarball be verified before extracting? (true/false)",
+          "default": "true"
+        },
+        {
+          "type": "string",
+          "namespace": "lynis",
+          "bundle": "globals",
+          "variable": "gpg_pubkey_url",
+          "label": "GPG public key URL",
+          "question": "Where should the CISOfy GPG signing key be downloaded from?",
+          "default": "https://downloads.cisofy.com/files/cisofy-software.pub"
         }
       ]
     },