diff --git a/group.yml b/group.yml
index 53bbeff6b4..aca7321586 100644
--- a/group.yml
+++ b/group.yml
@@ -102,6 +102,8 @@ rhcos:
     - kernel  # since 9.3, kernel-rt is merged into the kernel package.
     ose-ovn-kubernetes:
     - libreswan
+  exempt_rpms: # skip check these rpms as they will aligned with rhel base image in rhcos
+  - libreswan
   allow_missing_brew_rpms: false
 
 check_external_packages:
diff --git a/images/ose-ovn-kubernetes.yml b/images/ose-ovn-kubernetes.yml
index 412ac5409d..c4384c8c81 100644
--- a/images/ose-ovn-kubernetes.yml
+++ b/images/ose-ovn-kubernetes.yml
@@ -37,6 +37,7 @@ scan_sources:
   # We should configure exemptions for those known pins to avoid meaningless rebuild.
   # https://github.com/openshift/ovn-kubernetes/blob/e236fea83d62de8b60b9456770a3e0b525830051/Dockerfile.base#L22
   exempt_rpms:
+  - libreswan*
   - ovn*
 for_payload: true
 from:
diff --git a/images/ovn-kubernetes-base.yml b/images/ovn-kubernetes-base.yml
index aeb1851f1f..10c2cd29ac 100644
--- a/images/ovn-kubernetes-base.yml
+++ b/images/ovn-kubernetes-base.yml
@@ -28,6 +28,7 @@ scan_sources:
   # We should configure exemptions for those known pins to avoid meaningless rebuild.
   # https://github.com/openshift/ovn-kubernetes/blob/e236fea83d62de8b60b9456770a3e0b525830051/Dockerfile.base#L22
   exempt_rpms:
+  - libreswan
   - ovn*
 for_payload: false
 for_release: false
diff --git a/images/ovn-kubernetes-microshift.yml b/images/ovn-kubernetes-microshift.yml
index 6f3edd93d6..2683be67d8 100644
--- a/images/ovn-kubernetes-microshift.yml
+++ b/images/ovn-kubernetes-microshift.yml
@@ -37,6 +37,7 @@ scan_sources:
   # We should configure exemptions for those known pins to avoid meaningless rebuild.
   # https://github.com/openshift/ovn-kubernetes/blob/e236fea83d62de8b60b9456770a3e0b525830051/Dockerfile.base#L22
   exempt_rpms:
+  - libreswan
   - ovn*
 for_payload: true
 from: