inspec/test/fixtures/profiles/inputs/metadata-sensitive/controls/sensitive.rb

25 lines
675 B
Ruby
Raw Normal View History

# A normal input should work normally
control "read-a-cleartext-input" do
describe input("cleartext_input") do
it { should eq "visible-in-clear" }
end
end
# A sensitive input should be able to be
# read internally by InSpec but have its
# value obscured in reporters input listings
# (this does not affect the test message output)
control "read-a-sensitve-input" do
describe input("sensitive_input") do
it { should eq "visible-in-secret" }
end
end
# An input with sensitive = false should work normally
control "read-an-explicitly-nonsesnitve-input" do
describe input("explicitly_nonsensitive_input") do
it { should eq "visible-in-clear" }
end
end