2016-09-12 15:15:41 +00:00
|
|
|
Usage:
|
|
|
|
|
inspec exec PATHS
|
|
|
|
|
|
|
|
|
|
Options:
|
|
|
|
|
t, [--target=TARGET] # Simple targeting option using URIs, e.g. ssh://user:pass@host:port
|
|
|
|
|
b, [--backend=BACKEND] # Choose a backend: local, ssh, winrm, docker.
|
|
|
|
|
[--host=HOST] # Specify a remote host which is tested.
|
|
|
|
|
p, [--port=N] # Specify the login port for a remote scan.
|
|
|
|
|
[--user=USER] # The login user for a remote scan.
|
|
|
|
|
[--password=PASSWORD] # Login password for a remote scan, if required.
|
|
|
|
|
i, [--key-files=one two three] # Login key or certificate file for a remote scan.
|
|
|
|
|
[--path=PATH] # Login path to use when connecting to the target (WinRM).
|
|
|
|
|
[--sudo], [--no-sudo] # Run scans with sudo. Only activates on Unix and non-root user.
|
|
|
|
|
[--sudo-password=SUDO_PASSWORD] # Specify a sudo password, if it is required.
|
|
|
|
|
[--sudo-options=SUDO_OPTIONS] # Additional sudo options for a remote scan.
|
|
|
|
|
[--sudo-command=SUDO_COMMAND] # Alternate command for sudo.
|
|
|
|
|
[--ssl], [--no-ssl] # Use SSL for transport layer encryption (WinRM).
|
|
|
|
|
[--self-signed], [--no-self-signed] # Allow remote scans with self-signed certificates (WinRM).
|
|
|
|
|
[--json-config=JSON_CONFIG] # Read configuration from JSON file (`-` reads from stdin).
|
|
|
|
|
l, [--log-level=LOG_LEVEL] # Set the log level: info (default), debug, warn, error
|
|
|
|
|
[--profiles-path=PROFILES_PATH] # Folder which contains referenced profiles.
|
|
|
|
|
[--controls=one two three] # A list of controls to run. Ignore all other tests.
|
|
|
|
|
[--format=FORMAT] # Which formatter to use: cli, progress, documentation, json, json-min
|
|
|
|
|
[--color], [--no-color] # Use colors in output.
|
|
|
|
|
# Default: true
|
|
|
|
|
[--attrs=one two three] # Load attributes file (experimental)
|
2016-09-20 10:34:09 +00:00
|
|
|
[--cache=CACHE] # Use the given path for caching dependencies. (default: ~/.inspec/cache)
|
2016-09-12 15:15:41 +00:00
|
|
|
l, [--log-level=LOG_LEVEL] # Set the log level: info (default), debug, warn, error
|
|
|
|
|
[--log-location=LOG_LOCATION] # Location to send diagnostic log messages to. (default: STDOUT or STDERR)
|
|
|
|
|
[--diagnose], [--no-diagnose] # Show diagnostics (versions, configurations)
|
|
|
|
|
|
|
|
|
|
run all test files at the specified PATH.
|
