2016-09-12 12:45:40 +00:00
|
|
|
# meta-profile
|
2016-09-09 12:07:21 +00:00
|
|
|
|
|
|
|
|
The inspec.yml file in this profile shows how one can use dependencies
|
|
|
|
|
from non-local sources such as Git or an HTTP url. This feature can
|
|
|
|
|
be used to build up a environment-wide profile that is based on more
|
|
|
|
|
specific profiles managed by others.
|
2016-11-09 17:12:22 +00:00
|
|
|
|
|
|
|
|
InSpec supports multiple profile locations:
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
depends:
|
|
|
|
|
# defaults to supermarket
|
|
|
|
|
- name: hardening/ssh-hardening
|
|
|
|
|
# remote tar or zip file
|
|
|
|
|
- name: os-hardening
|
|
|
|
|
url: https://github.com/dev-sec/tests-os-hardening/archive/master.zip
|
|
|
|
|
# git
|
2017-05-09 08:55:31 +00:00
|
|
|
- git: https://github.com/dev-sec/ssl-baseline.git
|
2016-11-09 17:12:22 +00:00
|
|
|
- name: windows-patch-benchmark
|
|
|
|
|
git: https://github.com/chris-rock/windows-patch-benchmark.git
|
|
|
|
|
# Chef Compliance
|
|
|
|
|
- name: linux
|
|
|
|
|
compliance: base/linux
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
You could use those dependencies in your `exmaple.rb`:
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
include_controls 'hardening/ssh-hardening'
|
|
|
|
|
include_controls 'os-hardening'
|
2017-05-09 08:55:31 +00:00
|
|
|
include_controls 'ssl-baseline'
|
2016-11-09 17:12:22 +00:00
|
|
|
include_controls 'linux'
|
|
|
|
|
include_controls 'windows-patch-benchmark'
|
|
|
|
|
```
|
|
|
|
|
|
2017-04-27 22:05:51 +00:00
|
|
|
Further details are described in our [InSpec Docs](https://www.inspec.io/docs/reference/profiles/)
|
