I prepared a new version what contains a rule for fipscheck. So it would be great, if you can test this out. Just a zypper up should update to the new package. The mentioned update of programs_bad.dat is as far as i know a normal issue. It can be, that the updates of that *.dat files also coming between releases. But if a 1.4.3 coming out, it should have a new set of updated files.