* modify resource
* windows compatibility
* end line
* removing comments to clean things up
Signed-off-by: Aaron Lippold <lippold@gmail.com>
* CHEF-12175: Remove use of `Kernel.open` or `IO.read` or similar sinks with a non-constant value (#7079)
* fix: update io reads to fix codescanning vuln
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* fix: remove kernel#open fallback and update open method to handle local files
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* fix: replace io.readlines to file.readlines
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* chore: fix lint offense, unnecessary space
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* fix: raise exception for standard errors as FetcherFailure
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* chore: update exception message
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
---------
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* fix: Missing regular expression anchor (#7077)
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Bump version to 6.6.27 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Fix gitignore file in docs dir (#7082)
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Bump version to 6.6.28 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* adding docs now that the gitignore is fixed.
Signed-off-by: Aaron Lippold <lippold@gmail.com>
* add docs for sshd_active_config resource
* fix docs
* unit tests
* rubocop on ssh_config.rb, sshd_con_test.rb, and sshd_active_config.md
* rename active path in method
* doc fix
* Linting Corrections for Active SSHD Config (#1)
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Update sshd_active_config.md
updated version
* doc version update
---------
Signed-off-by: Aaron Lippold <lippold@gmail.com>
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Daniel Medina <dmedina@mitre.org>
Co-authored-by: Sonu Saha <98935583+ahasunos@users.noreply.github.com>
Co-authored-by: Chef Expeditor <chef-ci@chef.io>
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
Co-authored-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Remove unused telemetry v1 code
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Sketch out basics of telemetry, with start/stop of invocation telemetry
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Data structure for run telemetry - job capture
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Add per-control and per-run feature detection
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* CHEF-4017 Telemetry job api updations (#6965)
* Added initial changes to jobs api
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Feature flag changes for telemetry
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* move base, debug and null to its own file structure
Signed-off-by: Sathish <sbabu@progress.com>
* make HTTP client post requests
Signed-off-by: Sathish <sbabu@progress.com>
* remove old logic
Signed-off-by: Sathish <sbabu@progress.com>
* make backend class as `HTTP`
Signed-off-by: Sathish <sbabu@progress.com>
* CHEF-7258 Fetch and use licensing information for telemetry (#6964)
* Added method to fetch license ids for inspec
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Added free license check for performing telemetry api call
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* move base, debug and null to its own file structure
Signed-off-by: Sathish <sbabu@progress.com>
* make HTTP client post requests
Signed-off-by: Sathish <sbabu@progress.com>
* remove old logic
Signed-off-by: Sathish <sbabu@progress.com>
* make backend class as `HTTP`
Signed-off-by: Sathish <sbabu@progress.com>
---------
Signed-off-by: Nik08 <nikita.mathur@progress.com>
Signed-off-by: Sathish <sbabu@progress.com>
Co-authored-by: Sathish <sbabu@progress.com>
* Updated control tags and desc value to be used in jobs api
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Added checks for automate run context and free license check
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* capture target mode and id
Signed-off-by: Sathish <sbabu@progress.com>
* profile doesn't need ID
Signed-off-by: Sathish <sbabu@progress.com>
* use run context to set environment data
Signed-off-by: Sathish <sbabu@progress.com>
* refactor `create_wrapper` to be localized
Signed-off-by: Sathish <sbabu@progress.com>
* change all timestamps to be UTC
Signed-off-by: Sathish <sbabu@progress.com>
* Null checks for response and corrected job api endpoint
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Fixed tag values to be sent as string in api call
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* make version as float
Signed-off-by: Sathish <sbabu@progress.com>
* add platform name
Signed-off-by: Sathish <sbabu@progress.com>
* Added control result data in jobs api payload
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Debug logs added for telemetry call
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Removed unwanted telemetry debug class
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Payload fix to pass features data only on per control basis
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Added class function to list all invoked features by feature sub system
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Using feature system to get all invoked features list to be used in jobs api
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Unit tests cases updated and fixed
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* License type check downcased
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Lint fix
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* CHEF-7265 Telemetry opt-in for CINC users (#6966)
* Enabled telemtry opt-in
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Removed old comments
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Unit test case added to validate the disabling telemetry behaviour for inspec user
Signed-off-by: Nik08 <nikita.mathur@progress.com>
---------
Signed-off-by: Nik08 <nikita.mathur@progress.com>
---------
Signed-off-by: Nik08 <nikita.mathur@progress.com>
Signed-off-by: Sathish <sbabu@progress.com>
Co-authored-by: Sathish <sbabu@progress.com>
* Product team review changes - only disable telemetry for commercial license users
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Connection failure handling for telemetry http call
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Testing fix - Remove usage of deleted library
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Telemetry test case fix - Issue caused because unit test are run without feature flag env set
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Fixed and replaced tightly coupled semver versioning regex matching test for telemetry data
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Telemery test fix to use license key from env or a dummy value if not set in env
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Added error logs in case the http call is not successful for telemetry
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Error handling for telemetry start and run calls
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Telemetry opt-in changes (#7055)
* Removed usage of feature system to enable telemetry - making it opt-in by default
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Telemetry disable check fix when no option is passed in args
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Fix in test to use license specs defined for testing
Signed-off-by: Nik08 <nikita.mathur@progress.com>
---------
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* (Restoring) CHEF-10392 load default telemetry url conditionally (#7059)
* load default telemetry url conditionally
Signed-off-by: Sathish <sbabu@progress.com>
* remove version base path
version base path is defined in jobs path already
Signed-off-by: Sathish <sbabu@progress.com>
* use `CHEF_` prefix for the ENV
Signed-off-by: Sathish <sbabu@progress.com>
---------
Signed-off-by: Sathish <sbabu@progress.com>
Co-authored-by: Sathish <sbabu@progress.com>
* Typo fix in features list
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Stub added for CI license key
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* License usage telemetry correction - not track control results (#7060)
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Changes to disable telemetry for other InSpec distros (#7065)
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Lint issue fix
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Removing disable telemetry test - breaks on CI because of commercial license usage
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* CHEF-13228 Chef licensing telemetry documentation (#7056)
* WIP chef telemetry env variable usage updated
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* WIP intro added for chef telemetry - requires edit
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Correction in opt in behaviour of telemetry
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Doc update after default opt in changes
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Doc edit from product
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Doc edit
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Edits
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
---------
Signed-off-by: Nik08 <nikita.mathur@progress.com>
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Co-authored-by: Ian Maddaus <ian.maddaus@progress.com>
* Updated version pinning of chef licensing to version 1 for chef telemetry
Signed-off-by: Nik08 <nikita.mathur@progress.com>
---------
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Nik08 <nikita.mathur@progress.com>
Signed-off-by: Sathish <sbabu@progress.com>
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Co-authored-by: Nikita Mathur <Nik08@users.noreply.github.com>
Co-authored-by: Sathish <sbabu@progress.com>
Co-authored-by: Nik08 <nikita.mathur@progress.com>
Co-authored-by: Ian Maddaus <ian.maddaus@progress.com>
* Reorganize reusable text files
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Update text
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* update archetype
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Use text file
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
---------
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* ssh_key resource file
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Initial commit for unit test for ssh_key resource
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Fix linting and added resource in resources file
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* extend the ssh key resource to use file resource properties
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Updates the ssh_key resource to get length and type of key.
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Updates unit test for ssh_key resource.
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* ADDS Docs for ssh_key resource
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Fix Review: Empty file handling
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Fixed review comments and few code refactoring for ssh_key resource
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Doc edits
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Updates test
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
---------
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Co-authored-by: Ian Maddaus <ian.maddaus@progress.com>
* Update docs and introduce test for file content
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST: Fix broken test due to changes in fixture
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
---------
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Document where to look up the platform list
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Update docs-chef-io/content/inspec/profiles.md
Signed-off-by: "clintoncwolfe@gmail.com"
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
---------
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
* Adds cli options to enable audit log and configure the audit log
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Updated code to validate the audit log options. Audit log options are only valid for inspec exec and inspec shell command as those commands use the backend to execute commands and for file operations
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Updates cli options documentation for audit log options
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Disable audit log in test environment unless and until explicitly --enable-audit-log option is provided in test
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Rename enable-audit-log cli option to disable-audit-log
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* CHEF-8210 Enables feature preview flag for audit logging
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Revert "Disable audit log in test environment unless and until explicitly --enable-audit-log option is provided in test"
This reverts commit 50a42f0b44cf2fde6d927a00e444370cdd288a5d.
* Adds functional test for audit logging feature
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Updates cli doc for audit loggin feature flag
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Debug why audit log functional test fails in ci environment
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Revert "Rename enable-audit-log cli option to disable-audit-log"
This reverts commit d5169ec705.
* Revert "Debug why audit log functional test fails in ci environment"
This reverts commit 6f43898ad0.
* Removes the --enable-audit-log option from cli as feature flag will handle the enabling and disabling of audit log feature. And introduces few code changes after reverting renaming of --enable-audit-log option
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Updates the functional test for audit log
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* REVERT THIS ONCE THE TEST IS GREEN: This is just to test implementation of audit log against the train changes made for audit log
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Removes the right one
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Documentation for inspec audit logging feature
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Renames inspec audit log file
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Edits to audit log docs
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Remove --audit-log-rotation and --audit-log-size option to set from CLI
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Make sure we delete audit log file before running each test
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Appends timestamp and process id to generate audit log file per invocation/execution
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Updates functional test for audit logging feature
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Fix typo in audit logging docs
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Appends the timestamp and process id to user provided audit log file so that unique audit log file created per invocation
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Updates the audit log functional test
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Minor code improvements
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Adds exception class for invalid audit log options
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Revert "REVERT THIS ONCE THE TEST IS GREEN: This is just to test implementation of audit log against the train changes made for audit log"
This reverts commit a66137e70b.
* Upgrade train-core version pinning
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
* Docs review
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Fix titles
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Update the signature for features.yaml file
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
---------
Signed-off-by: Vasu1105 <vasundhara.jagdale@progress.com>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Co-authored-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Ian Maddaus <ian.maddaus@progress.com>
* Updated exec option to allow unsigned profiles run
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Added method to verify signed profile and to check for signed profile
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Invoked logic on each run to verify profiles if signed else raise sig req error
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Tests cases added to validate behaviour of inspec exec with signed and unsigned profiles with --chef-allow-unsigned flag
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Refactored and moved delete_signing_keys to common helper library for tests
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Updated code comments for more information and clarity on security update of signed profiles inspec exec
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Test cases to validate inspec run with combination of signed and unsigned profiles
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Documented usage of flag --chef-allow-unsigned
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Renamed the flag to run unsigned profiles to --allow-unsigned
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Refactored logic on profile level for profile signing verification
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Renaming the argument variable - from runner_call to silent
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Added profile mandate check for other inspec commands running profile evaluation
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Updated error message for profile sign requirement
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Updated test helper to fix inspec json test
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Fixed inspec json ability to use cli options successfully
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Documentation added for signed profiles mandatory usage with CLI commands
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Flow changes of raising exception when unsigned instead of direct exit
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Renamed unsigned profile flags
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Extracted out allow unsigned condition to config and modified comment info
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Doc update on consent of using signed and unsigned profiles
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Fix in signing mandatin check and added additional check on runner for better error UI for exec command
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Removed repeated allow-unsigned-profile defination from exec_options
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Test fixes
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Enabled feature preview flag for mandatory signing
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Test fixes after feature flag usage for mandatory signing
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Doc changes using feature preview flag for mandatory signing feature
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Inspec exec tests fixes for ENV values and parallel test fix using default option --allow-unsigned-profile false
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Kitchen fix while using signed profiles with inspec
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Unit test fix for profile resource exception
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Virtual profile detection improved
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Move mandatory profile sigining info to sigining page
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Renamed flag from --allow-unsigned-profile to --allow-unsigned-profiles
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Typo fix in signing doc
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Trim note in cli.md about mandatory profile signing
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Docs changes
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Correct docs regarding exit code 5
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
---------
Signed-off-by: Nik08 <nikita.mathur@progress.com>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Co-authored-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Ian Maddaus <ian.maddaus@progress.com>
* Failing test for export - should not evaluate
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Sketch out a info_from_parse method
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Temporary commit to checkpoint experimental work
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Basic control ids extraction
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Modify to capture entire block
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Ability to parse desc, impact and title of a control (#6662)
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Rework per-control metadata collectors to be class-based
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* REFACTOR: make a common base class for collectors
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* memoise `info_from_parse`
Signed-off-by: Sathish <sbabu@progress.com>
* Add --legacy-export option to inspec export (#6661)
* support legacy export option
Signed-off-by: Sathish <sbabu@progress.com>
* ability to run legacy export option
Signed-off-by: Sathish <sbabu@progress.com>
---------
Signed-off-by: Sathish <sbabu@progress.com>
* Improve ControlIDCollector and other fields of export data (#6686)
* Parse tags & refs from the ast nodes
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ENHANCE: Improve Desc collector to collect description
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ENHANCE: Only loop through the child node of begin block
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Fix bug/todo to handle duplicacy of control ids
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST - a profile which fails to properly be exported but is likely to be used by MITRE
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Revert "FIX: Fix bug/todo to handle duplicacy of control ids"
This reverts commit 46d66e0026.
* Revert "ENHANCE: Only loop through the child node of begin block"
This reverts commit 47c92d8746.
* ADD: Add code key in control data
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ADD: Add source_location key in controls data
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* HACK: Update the location ref for the controls
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Update variable name as latest changes
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Fix source location ref for all controls in a file
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Improve tagcollector to handle other data types
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Improve tagcollector to handle different types of tags
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ENHANCE & TEST: Improve tag collector to collector different tag styles and add test for it
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* update groups
Signed-off-by: Sathish <sbabu@progress.com>
* Add yml data to export info_from_parse
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add inputs to export data info_from_parse
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add status and status_messages
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Initialize all control fields
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* WIP: Filter controls using --controls
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add inputs collector class - rules remaining
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Parse inputs from dsl - 1
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST: Uncomment tests to verify export
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST: Include test for different desc
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST: Include test for different title
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST: Include test for different ref
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Default impact to 0.5 and add test
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Avoid duplicate inputs
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add test for inputs
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* REFACTOR: Minor refactoring of tests
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Uncomment test for refs
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
---------
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Sathish <sbabu@progress.com>
Co-authored-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Sathish <sbabu@progress.com>
* Update option to match inspec's coding standard
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Handle inputs within control block
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST & ENHANCE: Enhance parser and add more tests
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Fix broken test for profile_test
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Update groups after filtering control
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add --legacy-export support to inspec json
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST: Fix broken test & fix group filters
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* DOCS: Manually update cli.md to include export cmd
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add tag filtering support to export
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST: Add test for tag and control based filtering
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* LINT: Fix lint offense
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* CHORE: Remove addressed todo and update comments
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* CHEF-6493: Support `--legacy-export` option in `inspec archive` (#6829)
* Introduce --legacy-export flag to archive command
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add more test to verify --legacy-export with archive
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Update logic to fetch info based on --legacy-export flag
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
---------
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Enhance InputCollector to match pattern instead of to indexing children type to avoid nil errors
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Improve RefCollector to handle ref ({:ref=>'Some ref', :url=>'https://'\}\) syntax
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Improve RefCollector and TagCollector to handle variables values from inputs/attributes
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Run inspec check using output info_from_parse (#6673)
* Add test fixture profile that emits evaluation markers on stderr
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Failing test for export - should not evaluate
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Sketch out a info_from_parse method
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Temporary commit to checkpoint experimental work
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Basic control ids extraction
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Modify to capture entire block
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Ability to parse desc, impact and title of a control (#6662)
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Rework per-control metadata collectors to be class-based
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* REFACTOR: make a common base class for collectors
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* memoise `info_from_parse`
Signed-off-by: Sathish <sbabu@progress.com>
* Add --legacy-export option to inspec export (#6661)
* support legacy export option
Signed-off-by: Sathish <sbabu@progress.com>
* ability to run legacy export option
Signed-off-by: Sathish <sbabu@progress.com>
---------
Signed-off-by: Sathish <sbabu@progress.com>
* Parse tags & refs from the ast nodes
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ENHANCE: Improve Desc collector to collect description
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ENHANCE: Only loop through the child node of begin block
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Fix bug/todo to handle duplicacy of control ids
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST - a profile which fails to properly be exported but is likely to be used by MITRE
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Revert "FIX: Fix bug/todo to handle duplicacy of control ids"
This reverts commit 46d66e0026.
* Revert "ENHANCE: Only loop through the child node of begin block"
This reverts commit 47c92d8746.
* ADD: Add code key in control data
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ADD: Add source_location key in controls data
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* HACK: Update the location ref for the controls
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Update variable name as latest changes
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Fix source location ref for all controls in a file
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Improve tagcollector to handle other data types
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Improve tagcollector to handle different types of tags
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ENHANCE & TEST: Improve tag collector to collector different tag styles and add test for it
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* update groups
Signed-off-by: Sathish <sbabu@progress.com>
* Add yml data to export info_from_parse
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add inputs to export data info_from_parse
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add status and status_messages
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Initialize all control fields
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* make description `default` as a symbol
Signed-off-by: Sathish Babu <sbabu@progress.com>
* define `checks` as Set
Signed-off-by: Sathish Babu <sbabu@progress.com>
* Collect tests as part of collector
and store it in `checks`
Signed-off-by: Sathish Babu <sbabu@progress.com>
* refactor to read `ID` from controls which is an Array now unlike an Hash in `params.controls`
Signed-off-by: Sathish Babu <sbabu@progress.com>
* read yaml params from metadata
Signed-off-by: Sathish Babu <sbabu@progress.com>
* use to Array to simply DS as the o/p ie being converted to JSON
Signed-off-by: Sathish Babu <sbabu@progress.com>
* move old check as legacy check
Signed-off-by: Sathish Babu <sbabu@progress.com>
* support `legacy_check` as an option to run checks in legacy mode
Signed-off-by: Sathish Babu <sbabu@progress.com>
* fix tests to support `legacy_checks`
Signed-off-by: Sathish Babu <sbabu@progress.com>
* update document for check
Signed-off-by: Sathish Babu <sbabu@progress.com>
* Update usage doc for --legaccy-check
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
---------
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Signed-off-by: Sathish <sbabu@progress.com>
Signed-off-by: Sathish Babu <sbabu@progress.com>
Co-authored-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Sonu Saha <98935583+ahasunos@users.noreply.github.com>
Co-authored-by: Sonu Saha <sonu.saha@progress.com>
* LINT: Fix lint offense
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* do not include tests to controls by default
Signed-off-by: Sathish Babu <sbabu@progress.com>
* generate info with tests for check
Signed-off-by: Sathish Babu <sbabu@progress.com>
---------
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Signed-off-by: Sathish <sbabu@progress.com>
Signed-off-by: Sathish Babu <sbabu@progress.com>
Co-authored-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Sathish <sbabu@progress.com>
Co-authored-by: Sathish Babu <80091550+sathish-progress@users.noreply.github.com>
* Doc change for connection issues with licensing service
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Doc updated for file formate version and software entitlement issue
Signed-off-by: Nik08 <nikita.mathur@progress.com>
* Docs editing
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Edits
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Advice to use license list when a license is not entitled
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Update docs-chef-io/content/inspec/troubleshooting.md
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
* A few more corrections
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
---------
Signed-off-by: Nik08 <nikita.mathur@progress.com>
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Ian Maddaus <ian.maddaus@progress.com>
Co-authored-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
* Update link in profiles.md
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Fix link to Learn Chef
* Fix another bad link
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* One more link
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
---------
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* CHEF-3412 Preliminary commit to add inspec6 install docs
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Add instructions for versioning content
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Write docs for inspec 6 license key setting on first run
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Move content back to one page
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Editing
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Remove mention of discontinued homebrew availability
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Remove mention of motivation for local licensing server
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* More edits
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Remove text about creating trial license
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* More edits
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Add an install menu section, platforms page, uninstall page, and license page
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* nitpicking
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
---------
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* make profile check optional
Signed-off-by: Sathish <sbabu@progress.com>
* Clarify error message when making inspec check optional
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Add test fixture profile that emits evaluation markers on stderr
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Make export to inspec.json optional, not enabled by default
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Add test confirming non-evaluative archive
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Fix failing plugin search test, failing since we published a new test gem
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
---------
Signed-off-by: Sathish <sbabu@progress.com>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Revert change to CLI page in b59e2cb
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Reformat options so they are a description list
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Add license content from #6583
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
---------
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Sync up the default branch as main (#6239)
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
* Bump version to 5.20.2 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* resolvesinspec/inspec#6042 (#6043)
Signed-off-by: Marijus Ravickas <marijus.ravickas@gmail.com>
Signed-off-by: Marijus Ravickas <marijus.ravickas@gmail.com>
* Enhance `lxc` resource to test properties (#6243)
* ENHANCE: Extend lxc resource to test the properties
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST: Extend test for introduced properties
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* DOCS: Extend test for introduced properties
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Correct exception class to handle bad yaml
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Doc Review
Signed-off-by: Deepa Kumaraswamy <dkumaras@progress.com>
* FIX: Handle specific exception to handle bad yaml
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Signed-off-by: Deepa Kumaraswamy <dkumaras@progress.com>
Co-authored-by: Deepa Kumaraswamy <dkumaras@progress.com>
* Bump version to 5.20.3 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* CFINSPEC-462: Fixes inspec sign breaks when there is period or dot in the profile name (#6261)
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.20.4 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* CFINSPEC-374 DSL keyword `only_applicable_if` added (#6229)
* Not applicable if logic addition
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Changes from not applicable if to only applicable if
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Fix to enable placing only_applicable_if at any position in control and for keeping impact zero intact
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Doc change added for only_applicable_if
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Doc Review
Signed-off-by: Deepa Kumaraswamy <dkumaras@progress.com>
* Added generic examples that supports cross platform for testing
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Yet another build fix due to changes in test
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
Signed-off-by: Deepa Kumaraswamy <dkumaras@progress.com>
Co-authored-by: Deepa Kumaraswamy <dkumaras@progress.com>
* Bump version to 5.21.0 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* CFINSPEC-458 Oracle DB session resource compatibility with AIX-C shell (#6257)
* Oracle DB session resource compatibility with AIX-Cshell
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Fixes in oracledb session unit test using oracle_query_string
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Bump version to 5.21.1 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Replace faraday_middleware with faraday-follow_redirects (#6238)
faraday_middleware was already DEPRECATED in 2022-01.
Only FaradayMiddleware::FollowRedirects from faraday_middleware has been
used, and so we can replace it with faraday-follow_redirects.
faraday-follow_redirects 0.3.0 requires faraday ~> 1.0, which is as same
as "faraday_middleware 1.0.0 or higher.
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
* Bump version to 5.21.2 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Update Faraday gem (#6267)
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.21.3 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Bump test-kitchen from 3.3.1 to 3.3.2 in /omnibus (#6227)
Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 3.3.1 to 3.3.2.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/commits)
---
updated-dependencies:
- dependency-name: test-kitchen
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump version to 5.21.4 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Bump omnibus-software from `1d540dc` to `7d0e0fe` in /omnibus (#6274)
Bumps [omnibus-software](https://github.com/chef/omnibus-software) from `1d540dc` to `7d0e0fe`.
- [Release notes](https://github.com/chef/omnibus-software/releases)
- [Commits](1d540dcdef...7d0e0fe472)
---
updated-dependencies:
- dependency-name: omnibus-software
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump version to 5.21.5 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Fix for omnibus build failure on Windows (#6289)
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.21.6 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* RESOURCE-527 Add an inspec init template for alicloud (#6304)
* adding the alicloud in the spec.files
Signed-off-by: Soumyodeep Karmakar <soumyo.k13@gmail.com>
* adding the test for generating inspec profile alicloud
Signed-off-by: Soumyodeep Karmakar <soumyo.k13@gmail.com>
* adding the alicloud profile
Signed-off-by: Soumyodeep Karmakar <soumyo.k13@gmail.com>
* fix lint error
Signed-off-by: Soumyodeep Karmakar <soumyo.k13@gmail.com>
Signed-off-by: Soumyodeep Karmakar <soumyo.k13@gmail.com>
* Bump version to 5.21.7 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Fix Ruby 2.7 Bundle Installs on CI Verify Pipeline (#6324)
* We will never be on 2.6 again
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Only run html-proofer test on Ruby 3
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Pin to chef 16 on ruby 2.7, 17+ on Ruby 3
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Bump version to 5.21.8 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* CFINSPEC-493 update signing_identity (#6298)
* update signing_identity
Signed-off-by: Sathish <sbabu@progress.com>
* pin chef to older version for ruby version lesser than 3.0
Signed-off-by: Sathish <sbabu@progress.com>
Signed-off-by: Sathish <sbabu@progress.com>
Co-authored-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Bump version to 5.21.9 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Cfinspec 488 fix nokigiri omnibus (#6305)
* update signing_identity
Signed-off-by: Sathish <sbabu@progress.com>
* pin chef 17.0 to ruby 2.7
Signed-off-by: Sathish <sbabu@progress.com>
* add nokogiri as dependency
Signed-off-by: Sathish <sbabu@progress.com>
* pin chef to older version for ruby version lesser than 3.0
Signed-off-by: Sathish <sbabu@progress.com>
* Linting
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Sathish <sbabu@progress.com>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Bump version to 5.21.10 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Remove Windows 3.0 testing. Chef 18 was never released for Ruby 3.0, only 3.1 (#6330)
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Bump version to 5.21.11 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Prevent negative status from crashing launchd service resource (#6262)
Signed-off-by: dtheyer <davidheyer2016@gmail.com>
Signed-off-by: dtheyer <davidheyer2016@gmail.com>
* Bump version to 5.21.12 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Update chefstyle from 2.0.x to 2.2.2 to use RuboCop 1.25.1 (#6240)
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
* Bump version to 5.21.13 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Update readme for usage via Docker (CFINSPEC-516) (#6329)
* DOCS: Update readme for usage via Docker (CFINSPEC-516)
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* DOCS: Explain updated readme (CFINSPEC-516)
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Bump version to 5.21.14 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* CFINSPEC-393 - Fix for custom plugin loading issue when gemspec file is invalid and unable to load the lib path. (#6334)
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.21.15 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* CFINSPEC-517: Fix for habitat buld failure (#6340)
* Fix for habitat buld failure - Git load issue
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Updating ruby installer version to 3.2.1
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Revert "Updating ruby installer version to 3.2.1"
This reverts commit 53bae0f71e.
* Checking removing the lines which are not needed.
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Revert "Checking removing the lines which are not needed."
This reverts commit b5561abc51.
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.21.16 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Upgraded mock ubuntu test from 20.04 to 22.04 (#6351)
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Fixing typo in user_permissions (#6344)
* Fixing typo in user_permissions
Signed-off-by: Magruder, Micah <Micah.Magruder@oracle.com>
* Corrected spacing
Signed-off-by: Magruder, Micah <Micah.Magruder@oracle.com>
Signed-off-by: Magruder, Micah <Micah.Magruder@oracle.com>
* Bump version to 5.21.17 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Fix env smoke test by updating ERB.new in `inspec env`; add additional test (#6342)
* Failing test for Ruby 3.1 - ERB.new call options changed
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Fix for Ruby 3.1 by using named params to ERB.new
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Restrict test to non-windows systems
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Restrict test to non-windows systems
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* CFINSPEC-533: Fix undefined method 'summary' for Gem::SourceFetchProblem (NoMethodError) when airgapped (#6337)
* This fixes the undefined method 'summary' for #<Gem::SourceFetchProblem:0x000000000139dc70> (NoMethodError) while invoking any inspec command if the custom plugin is installed and if inspec commands are run in an air gap environment.
This fix removes an earlier call for getting gem specification from rubygems.org which is the cause for above error and replaces it with fetching the summary from a locally saved gemspec file. This will work in both airgap and non-airgap environments.
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Adds test for reading description from local gemspec file.
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.21.18 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Fix omnibus build which is picking ruby 2.7.4 which has vulnerability (#6341)
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
Co-authored-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.21.19 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Bump version to 5.21.20 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Update CHANGELOG.md with details from pull request #6341
Obvious fix; these changes are the result of automation not creative thinking.
* Revert "CFINSPEC-240 Extended file format support for waivers (#6193)" (#6366)
This reverts commit b7ddac9dcc.
* Bump version to 5.21.21 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Revert the nokogiri dependency from omnibus project configuration (#6372)
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.21.22 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* CFINSPEC-553: Fix failing verify pipeline builds on ruby 3.0 (#6378)
* bundle install without kitchen group from Gemfile as verify pipeline is breaking for ruby 3.0 as Chef 18 requires to be work with ruby 3.1. In future we will be removing the support for ruby 3.0 as Chef 18 never released with ruby 3.0
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Removes all excluded groups from the bundle config set which was removed from the Gemfile.
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Exclude the gem dependencies for kitchen for omnibus builds
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Exclude the kitchen dependencies on windows platform too
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.21.23 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Ruby 3.1 support: Adds ucrt platform to resolve windows omnibus build. (#6381)
* Adds the ucrt platform support for Windows
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Adds the environment variable to ignore artifactory proxy as some gem are getting 500 error when tries to download from artifactory
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.21.24 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* CFINSPEC-240 Extended file format support for waivers: JSON & CSV (#6369)
* Revert "Revert "CFINSPEC-240 Extended file format support for waivers (#6193)" (#6366)"
This reverts commit 30146e07fe.
* Waiver support for csv and json
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Removed the word excel from image tag
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Update waivers.md
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Co-authored-by: Ian Maddaus <ian.maddaus@progress.com>
* Bump version to 5.21.25 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* CFINSPEC-542 Bug fix for profiles with dependent profiles (#6377)
* Matching semver using regex to determine profile name without version in dsl logic
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Testing for selecting control using version in require control dsl
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Documentation for using version with profile name when including or selecting controls in a profile
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Commenting in dsl library about logic for fetching version and matching it
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Comment for regex used to fetch version
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Minor improvement for regex variable placement
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Bump version to 5.21.26 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Bump version of omnibus-software (#6385)
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.21.27 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Add ruby-msys2-devkit as dependency and check (#6391)
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* adding new private verify, as this will kick off the expeditor bump version (#6397)
Signed-off-by: Sean Simmons <ssimmons@progress.com>
Signed-off-by: Sean Simmons <ssimmons@progress.com>
* Bump version to 5.21.28 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Update copyright year in README (#6395)
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Bump version to 5.21.29 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Executed '.expeditor/update_dockerfile.sh'
Obvious fix; these changes are the result of automation not creative thinking.
* CFINSPEC-522: Remove rake tasks which are no longer used (#6367)
* CLEAN-UP: Remove unused rake tasks
missing, kitchen and version tasks are not used
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* CLEAN-UP: Remove functional rake test
test:default covers both unit and functional tests
default was introduced to cover both functional and unit in PR #4102
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* CLEAN-UP: Remove unused docs related tasks
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* CLEAN-UP: Remove tasks/* from expeditor config
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* REVERT: Undo deletion of functional test
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* RECOVER: Retain docs:cli task
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* UNDO: Revert changes to config
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* CHORE: Add reference to this PR in note for future use
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
---------
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* RAKE TEST: Fix rake task for docs:cli
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* DOCS: Generate cli.md with rake docs:cli
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Remove unused require
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FORMAT: Use html dl, dt, dd tags for displaying subcommands
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* REFACTOR: Remove repetitive dl closing for subcommands of single command
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Bump version to 5.21.30 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* CFINSPEC-573: Fix for mongo_session resources prints debug level of information in output of the run result. (#6401)
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Updates release process docs as per current changes (#6398)
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.21.31 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Bump version to 5.21.32 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* CFINSPEC-576 : Fix profile gem dependency loading issue when dependent gem is required inside profile libraries. (#6408)
* Test profile consist of custom resource which has a gem dependency
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* CFINSPEC-576 Fix for profile gem depedency loading issue if depedent gem is required in libraries files of the profile
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Fix windows test failure for profile gem dependency
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
---------
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.21.33 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* CFINSPEC-580 Dependent profiles fix for any scheme of version used in profiles (#6410)
* Dependent profiles fix for any scheme of version used in profiles
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Dependent profile fix when version is blank in dependent profiles
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
---------
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Bump version to 5.21.34 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Formatting fixes for podman docs (#6386)
* Formatting fixes for podman docs
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Minor fix
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
* Update docs-chef-io/content/inspec/resources/podman.md
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Co-authored-by: Vasundhara Jagdale <vasundhara.jagdale@chef.io>
* Update docs-chef-io/content/inspec/resources/podman.md
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Co-authored-by: Vasundhara Jagdale <vasundhara.jagdale@chef.io>
---------
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Co-authored-by: Vasundhara Jagdale <vasundhara.jagdale@chef.io>
* Bump version to 5.21.35 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* CFINSPEC-550 Add RHEL9 to build matrix (#6403)
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump omnibus-software from `6a13693` to `225e357` in /omnibus (#6442)
Bumps [omnibus-software](https://github.com/chef/omnibus-software) from `6a13693` to `225e357`.
- [Release notes](https://github.com/chef/omnibus-software/releases)
- [Commits](6a13693685...225e3576c4)
---
updated-dependencies:
- dependency-name: omnibus-software
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump version to 5.21.36 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Bump omnibus from `c66e97c` to `cf97613` in /omnibus (#6423)
Bumps [omnibus](https://github.com/chef/omnibus) from `c66e97c` to `cf97613`.
- [Release notes](https://github.com/chef/omnibus/releases)
- [Commits](c66e97c211...cf97613115)
---
updated-dependencies:
- dependency-name: omnibus
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump version to 5.21.37 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Bump kitchen-vagrant from 1.12.1 to 1.14.1 in /omnibus (#6427)
Bumps [kitchen-vagrant](https://github.com/opscode/kitchen-vagrant) from 1.12.1 to 1.14.1.
- [Release notes](https://github.com/opscode/kitchen-vagrant/releases)
- [Changelog](https://github.com/test-kitchen/kitchen-vagrant/blob/main/CHANGELOG.md)
- [Commits](https://github.com/opscode/kitchen-vagrant/compare/v1.12.1...v1.14.1)
---
updated-dependencies:
- dependency-name: kitchen-vagrant
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump version to 5.21.38 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Bump test-kitchen from 3.3.2 to 3.5.0 in /omnibus (#6360)
Bumps [test-kitchen](https://github.com/test-kitchen/test-kitchen) from 3.3.2 to 3.5.0.
- [Release notes](https://github.com/test-kitchen/test-kitchen/releases)
- [Changelog](https://github.com/test-kitchen/test-kitchen/blob/main/CHANGELOG.md)
- [Commits](https://github.com/test-kitchen/test-kitchen/commits/v3.5.0)
---
updated-dependencies:
- dependency-name: test-kitchen
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump version to 5.21.39 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Bump rack from 2.2.4 to 2.2.6.2 in /omnibus (#6388)
Bumps [rack](https://github.com/rack/rack) from 2.2.4 to 2.2.6.2.
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rack/rack/compare/2.2.4...v2.2.6.2)
---
updated-dependencies:
- dependency-name: rack
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump version to 5.21.40 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Revert "adding new private verify, as this will kick off the expeditor bump version (#6397)" (#6479)
This reverts commit 227b0f2d35.
* Bump version to 5.21.41 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* CHEF-1458 Multiple values changes in SimpleConfig library (#6489)
* Simple config changes to return array of values with multiple values opt
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* New option added to split multiple values with a delimiter regex
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
---------
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Bump version to 5.21.42 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Adds configuration required for sonarqube integration. (#6480)
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.21.43 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Add nftables resources (#6499)
* Fix systemd path for Leap image
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Use vhef client version 17 as doocker cookbook do not support >= 18
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Add nftables resource
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Add nftables tests
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Add fixtures for nftables tests
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* enable nftables only when attr is true - then disable iptables
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* By default test iptables, not nftables
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Fix tests and lint errors
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Increase unit test coverage for nftables
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Do not use -nn nft option as behaviour changes based on nft version
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Base nft params identification on its version, not os version
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Make test more human friendly by reversing unless/if logic
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Update mocked cmds with nft params
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Fix quoting issue with rubocop
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Fix uninitiallized class vars
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Fix unit test by adding nft version mocking
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Clean nftables doc
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
---------
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Bump version to 5.21.44 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Clarify key_rsa docs regarding SSH keys (#6507)
* Clarify that an RSA resource can only work on RSA keypairs
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Update docs-chef-io/content/inspec/resources/key_rsa.md
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
---------
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
* CHEF-2438 Add train-kubernetes to inspec gemspec (#6512)
* Add train-kubernetes to inspec gemspec, fix spacing
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Fix failing test to detect system plugins
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
---------
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
Co-authored-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.22.0 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Bump omnibus from `cf97613` to `ae855f3` in /omnibus (#6515)
Bumps [omnibus](https://github.com/chef/omnibus) from `cf97613` to `ae855f3`.
- [Release notes](https://github.com/chef/omnibus/releases)
- [Commits](cf97613115...ae855f3060)
---
updated-dependencies:
- dependency-name: omnibus
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump rack from 2.2.6.2 to 2.2.6.4 in /omnibus (#6490)
Bumps [rack](https://github.com/rack/rack) from 2.2.6.2 to 2.2.6.4.
- [Release notes](https://github.com/rack/rack/releases)
- [Changelog](https://github.com/rack/rack/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rack/rack/compare/v2.2.6.2...v2.2.6.4)
---
updated-dependencies:
- dependency-name: rack
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump version to 5.22.1 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Bump omnibus-software from `225e357` to `f06bbea` in /omnibus (#6508)
Bumps [omnibus-software](https://github.com/chef/omnibus-software) from `225e357` to `f06bbea`.
- [Release notes](https://github.com/chef/omnibus-software/releases)
- [Commits](225e3576c4...f06bbea744)
---
updated-dependencies:
- dependency-name: omnibus-software
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* fix: ensure Invoke-WebRequest headers can be configured (#6484)
* fix: ensure Invoke-WebRequest headers can be configured
Signed-off-by: Adrian Mlodzianowski <amlodzianowski@logicworks.net>
* fix: use array for custom headers
Signed-off-by: Adrian Mlodzianowski <amlodzianowski@logicworks.net>
* test: add unit test for Windows simple HTTP request with headers
Signed-off-by: Adrian Mlodzianowski <amlodzianowski@logicworks.net>
---------
Signed-off-by: Adrian Mlodzianowski <amlodzianowski@logicworks.net>
Co-authored-by: Adrian Mlodzianowski <amlodzianowski@logicworks.net>
* Bump version to 5.22.2 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* For #6493 : Add postgres_session support for custom port with a socket connection (#6494)
* Add support for custom port with a socket connection
Signed-off-by: Pg <pg.developper.fr@gmail.com>
* Add tests for the postgres_session with custom port
Signed-off-by: Pg <pg.developper.fr@gmail.com>
---------
Signed-off-by: Pg <pg.developper.fr@gmail.com>
* Bump version to 5.22.3 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Update host resource to resolve all ipaddresses (#6481)
Signed-off-by: Alan Foster <alan@alanfoster.me>
* CHEF-1631 Clarify that command timeout default was withdrawn (#6511)
* Clarify that command timeout default was withdrawn
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Delete reference to timeout default entirely.
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
---------
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
* Bump version to 5.22.4 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Executed '.expeditor/update_dockerfile.sh'
Obvious fix; these changes are the result of automation not creative thinking.
* Update rspec to 3.12 (#6523)
Update RSpec dependency. There are some fixes and no breaking changes in 3.12
Signed-off-by: Phil Pirozhkov <hello@fili.pp.ru>
* Bump version to 5.22.5 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Update Docker base image to be ubuntu 22.04 (#6526)
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Update CHANGELOG.md with details from pull request #6526
Obvious fix; these changes are the result of automation not creative thinking.
* SUPPORT: Update dockerfile for m1 support (#6541)
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Update CHANGELOG.md with details from pull request #6541
Obvious fix; these changes are the result of automation not creative thinking.
* Bump omnibus from `ae855f3` to `9c0643a` in /omnibus (#6543)
Bumps [omnibus](https://github.com/chef/omnibus) from `ae855f3` to `9c0643a`.
- [Release notes](https://github.com/chef/omnibus/releases)
- [Commits](ae855f3060...9c0643a3a4)
---
updated-dependencies:
- dependency-name: omnibus
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump version to 5.22.6 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Bump berkshelf from 8.0.2 to 8.0.7 in /omnibus (#6530)
Bumps [berkshelf](https://github.com/chef/berkshelf) from 8.0.2 to 8.0.7.
- [Changelog](https://github.com/chef/berkshelf/blob/main/CHANGELOG.md)
- [Commits](https://github.com/chef/berkshelf/compare/v8.0.2...v8.0.7)
---
updated-dependencies:
- dependency-name: berkshelf
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump version to 5.22.7 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Bump omnibus-software from `f06bbea` to `4b08f0b` in /omnibus (#6548)
Bumps [omnibus-software](https://github.com/chef/omnibus-software) from `f06bbea` to `4b08f0b`.
- [Commits](f06bbea744...4b08f0bc06)
---
updated-dependencies:
- dependency-name: omnibus-software
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Bump version to 5.22.8 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* YAML reporter test fix (#6563)
* Fix for yaml reporter data, not matching empty values with spaces
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Additional comment to document affecting fields
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
---------
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Bump version to 5.22.9 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* Add inspec-6 branch to Dependabot monitoring. This change must be made on main for Dependabot to pick it up. (#6569)
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Update CHANGELOG.md with details from pull request #6569
Obvious fix; these changes are the result of automation not creative thinking.
* CHEF-4115 Added ability to merge reporter configurations from both CLI and config (#6568)
* Added ability to merge cli and config reporter options
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Test cases to validate working of reporter configuration using cli and config
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Documentation change to add information on reporter configurations usage with both
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Added Doc review changes and text fixture for config json
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Verify fix
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Verify pipeline test fixes for reporter options to be read successfully
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Test changes in both cli and config reporter usage scenarios to fix verify pipeline
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Review comments to improvise
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Renamed testing fixture file for reporter cli config file
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
---------
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Bump version to 5.22.10 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* EULA: Update installer license text (#6582)
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Bump version to 5.22.11 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* CHEF-5200 Waived controls are not getting waived (skipped) in case of failure at resource level. (#6588)
* CHEF-5200: This fix applies waiver if exception occurs while eval the control inside control block. This ensures that waiver are got applied in case of resouce level failures too.
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* When waiver file is empty error should be raised the written is invalid for the empty waiver file.
Added different test to check only_if waiver is applied when the waived control in the waived file has expired.
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Fix lint
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Fix test failing on windows due to different exit code on the Windows.
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
---------
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
* Bump version to 5.22.12 by Chef Expeditor
Obvious fix; these changes are the result of automation not creative thinking.
* remove kitchen group
* keep waiver refactoring for inspec-6
Signed-off-by: Sathish <sbabu@progress.com>
---------
Signed-off-by: Takuya Noguchi <takninnovationresearch@gmail.com>
Signed-off-by: Marijus Ravickas <marijus.ravickas@gmail.com>
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Signed-off-by: Deepa Kumaraswamy <dkumaras@progress.com>
Signed-off-by: Vasu1105 <vasundhara.jagdale@chef.io>
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Soumyodeep Karmakar <soumyo.k13@gmail.com>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Sathish <sbabu@progress.com>
Signed-off-by: dtheyer <davidheyer2016@gmail.com>
Signed-off-by: Magruder, Micah <Micah.Magruder@oracle.com>
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Signed-off-by: Sean Simmons <ssimmons@progress.com>
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
Signed-off-by: Adrian Mlodzianowski <amlodzianowski@logicworks.net>
Signed-off-by: Pg <pg.developper.fr@gmail.com>
Signed-off-by: Alan Foster <alan@alanfoster.me>
Signed-off-by: Phil Pirozhkov <hello@fili.pp.ru>
Co-authored-by: Takuya N <takninnovationresearch@gmail.com>
Co-authored-by: Chef Expeditor <chef-ci@chef.io>
Co-authored-by: Marijus Ravickas <marijus.ravickas@gmail.com>
Co-authored-by: Sonu Saha <98935583+ahasunos@users.noreply.github.com>
Co-authored-by: Deepa Kumaraswamy <dkumaras@progress.com>
Co-authored-by: Vasundhara Jagdale <vasundhara.jagdale@chef.io>
Co-authored-by: Nikita Mathur <Nik08@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Soumyodeep Karmakar <63713087+soumyo13@users.noreply.github.com>
Co-authored-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: dtheyer <davidheyer2016@gmail.com>
Co-authored-by: Micah Magruder <micah.magruder@cerner.com>
Co-authored-by: Ian Maddaus <ian.maddaus@progress.com>
Co-authored-by: sean-simmons-progress <111799713+sean-simmons-progress@users.noreply.github.com>
Co-authored-by: Sonu Saha <sonu.saha@progress.com>
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
Co-authored-by: jjacque <jeremy.jacque@algolia.com>
Co-authored-by: amlodzianowski <adrianmlodzianowski@gmail.com>
Co-authored-by: Adrian Mlodzianowski <amlodzianowski@logicworks.net>
Co-authored-by: Pg <pg.developper.fr@gmail.com>
Co-authored-by: Alan Foster <alan@alanfoster.me>
Co-authored-by: Phil Pirozhkov <pirj@users.noreply.github.com>
Co-authored-by: Nikita Mathur <nikita.mathur@chef.io>
* Added ability to merge cli and config reporter options
* Test cases to validate working of reporter configuration using cli and config
* Documentation change to add information on reporter configurations usage with both
* Added Doc review changes and text fixture for config json
* Verify fix
* Verify pipeline test fixes for reporter options to be read successfully
* Test changes in both cli and config reporter usage scenarios to fix verify pipeline
* Review comments to improvise
* Renamed testing fixture file for reporter cli config file
---------
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
Co-authored-by: Nikita Mathur <Nik08@users.noreply.github.com>
* Added ability to merge cli and config reporter options
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Test cases to validate working of reporter configuration using cli and config
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Documentation change to add information on reporter configurations usage with both
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Added Doc review changes and text fixture for config json
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Verify fix
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Verify pipeline test fixes for reporter options to be read successfully
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Test changes in both cli and config reporter usage scenarios to fix verify pipeline
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Review comments to improvise
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Renamed testing fixture file for reporter cli config file
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
---------
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Clarify that command timeout default was withdrawn
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Delete reference to timeout default entirely.
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
---------
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
* Fix systemd path for Leap image
* Use vhef client version 17 as doocker cookbook do not support >= 18
* Add nftables resource
* Add nftables tests
* Add fixtures for nftables tests
* enable nftables only when attr is true - then disable iptables
* By default test iptables, not nftables
* Fix tests and lint errors
* Increase unit test coverage for nftables
* Do not use -nn nft option as behaviour changes based on nft version
* Base nft params identification on its version, not os version
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Make test more human friendly by reversing unless/if logic
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Update mocked cmds with nft params
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Fix quoting issue with rubocop
* Fix uninitiallized class vars
* Fix unit test by adding nft version mocking
* Clean nftables doc
---------
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
Co-authored-by: jjacque <jeremy.jacque@algolia.com>
* Clarify that an RSA resource can only work on RSA keypairs
* Update docs-chef-io/content/inspec/resources/key_rsa.md
---------
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
* Clarify that an RSA resource can only work on RSA keypairs
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Update docs-chef-io/content/inspec/resources/key_rsa.md
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
---------
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Ian Maddaus <IanMadd@users.noreply.github.com>
* Fix systemd path for Leap image
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Use vhef client version 17 as doocker cookbook do not support >= 18
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Add nftables resource
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Add nftables tests
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Add fixtures for nftables tests
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* enable nftables only when attr is true - then disable iptables
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* By default test iptables, not nftables
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Fix tests and lint errors
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Increase unit test coverage for nftables
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Do not use -nn nft option as behaviour changes based on nft version
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Base nft params identification on its version, not os version
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Make test more human friendly by reversing unless/if logic
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Update mocked cmds with nft params
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Fix quoting issue with rubocop
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Fix uninitiallized class vars
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Fix unit test by adding nft version mocking
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Clean nftables doc
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
---------
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* DOCS: Generate cli.md with rake docs:cli
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Remove unused require
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FORMAT: Use html dl, dt, dd tags for displaying subcommands
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* REFACTOR: Remove repetitive dl closing for subcommands of single command
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
---------
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Co-authored-by: Sonu Saha <sonu.saha@progress.com>
* Matching semver using regex to determine profile name without version in dsl logic
* Testing for selecting control using version in require control dsl
* Documentation for using version with profile name when including or selecting controls in a profile
* Commenting in dsl library about logic for fetching version and matching it
* Comment for regex used to fetch version
* Minor improvement for regex variable placement
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
Co-authored-by: Nikita Mathur <Nik08@users.noreply.github.com>
* Revert "Revert "CFINSPEC-240 Extended file format support for waivers (#6193)" (#6366)"
This reverts commit 30146e07fe.
* Waiver support for csv and json
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Removed the word excel from image tag
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Removed excel file format support for attestations file (#6370)
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
* Update waivers.md
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
---------
Signed-off-by: Nikita Mathur <nikita.mathur@chef.io>
Signed-off-by: Ian Maddaus <ian.maddaus@progress.com>
Co-authored-by: Ian Maddaus <ian.maddaus@progress.com>
