Mirrors/ansible-collection-hardening
2
0
Fork 0
mirror of https://github.com/dev-sec/ansible-collection-hardening synced 2024-11-10 09:14:18 +00:00
Code Issues Projects Releases Packages Wiki Activity

add waivers to skip controls (#529)

Browse source 
Signed-off-by: rndmh3ro <github@gumpri.ch>
This commit is contained in:
Sebastian Gumprich 2022-02-21 13:58:39 +01:00 committed by GitHub
parent b6677fccd9
commit af14af5954
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
molecule/os_hardening/verify.yml
View file

@ -55,7 +55,7 @@
shell: "bash /tmp/install.sh -s -- -P cinc-auditor -v 4"
- name: Execute cinc-auditor tests
command: "/opt/cinc-auditor/bin/cinc-auditor exec --no-show-progress --no-color --no-distinct-exit https://github.com/dev-sec/linux-baseline/archive/refs/heads/master.zip"
command: "/opt/cinc-auditor/bin/cinc-auditor exec --no-show-progress --no-color --no-distinct-exit --waiver-file waivers.yaml https://github.com/dev-sec/linux-baseline/archive/refs/heads/master.zip"
register: test_results
changed_when: false
ignore_errors: true

3
molecule/os_hardening/waivers.yaml Normal file
View file

@ -0,0 +1,3 @@
os-14:
run: false
justification: "not yet implemented"