* Failing test for export - should not evaluate
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Sketch out a info_from_parse method
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Temporary commit to checkpoint experimental work
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Basic control ids extraction
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Modify to capture entire block
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Ability to parse desc, impact and title of a control (#6662)
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Rework per-control metadata collectors to be class-based
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* REFACTOR: make a common base class for collectors
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* memoise `info_from_parse`
Signed-off-by: Sathish <sbabu@progress.com>
* Add --legacy-export option to inspec export (#6661)
* support legacy export option
Signed-off-by: Sathish <sbabu@progress.com>
* ability to run legacy export option
Signed-off-by: Sathish <sbabu@progress.com>
---------
Signed-off-by: Sathish <sbabu@progress.com>
* Improve ControlIDCollector and other fields of export data (#6686)
* Parse tags & refs from the ast nodes
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ENHANCE: Improve Desc collector to collect description
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ENHANCE: Only loop through the child node of begin block
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Fix bug/todo to handle duplicacy of control ids
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST - a profile which fails to properly be exported but is likely to be used by MITRE
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Revert "FIX: Fix bug/todo to handle duplicacy of control ids"
This reverts commit 46d66e0026.
* Revert "ENHANCE: Only loop through the child node of begin block"
This reverts commit 47c92d8746.
* ADD: Add code key in control data
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ADD: Add source_location key in controls data
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* HACK: Update the location ref for the controls
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Update variable name as latest changes
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Fix source location ref for all controls in a file
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Improve tagcollector to handle other data types
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Improve tagcollector to handle different types of tags
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ENHANCE & TEST: Improve tag collector to collector different tag styles and add test for it
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* update groups
Signed-off-by: Sathish <sbabu@progress.com>
* Add yml data to export info_from_parse
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add inputs to export data info_from_parse
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add status and status_messages
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Initialize all control fields
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* WIP: Filter controls using --controls
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add inputs collector class - rules remaining
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Parse inputs from dsl - 1
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST: Uncomment tests to verify export
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST: Include test for different desc
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST: Include test for different title
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST: Include test for different ref
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Default impact to 0.5 and add test
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Avoid duplicate inputs
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add test for inputs
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* REFACTOR: Minor refactoring of tests
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Uncomment test for refs
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
---------
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Sathish <sbabu@progress.com>
Co-authored-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Sathish <sbabu@progress.com>
* Update option to match inspec's coding standard
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Handle inputs within control block
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST & ENHANCE: Enhance parser and add more tests
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Fix broken test for profile_test
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Update groups after filtering control
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add --legacy-export support to inspec json
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST: Fix broken test & fix group filters
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* DOCS: Manually update cli.md to include export cmd
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add tag filtering support to export
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST: Add test for tag and control based filtering
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* LINT: Fix lint offense
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* CHORE: Remove addressed todo and update comments
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* CHEF-6493: Support `--legacy-export` option in `inspec archive` (#6829)
* Introduce --legacy-export flag to archive command
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add more test to verify --legacy-export with archive
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Update logic to fetch info based on --legacy-export flag
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
---------
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Enhance InputCollector to match pattern instead of to indexing children type to avoid nil errors
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Improve RefCollector to handle ref ({:ref=>'Some ref', :url=>'https://'\}\) syntax
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Improve RefCollector and TagCollector to handle variables values from inputs/attributes
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Run inspec check using output info_from_parse (#6673)
* Add test fixture profile that emits evaluation markers on stderr
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Failing test for export - should not evaluate
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Sketch out a info_from_parse method
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Temporary commit to checkpoint experimental work
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Basic control ids extraction
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Modify to capture entire block
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Ability to parse desc, impact and title of a control (#6662)
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Rework per-control metadata collectors to be class-based
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* REFACTOR: make a common base class for collectors
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* memoise `info_from_parse`
Signed-off-by: Sathish <sbabu@progress.com>
* Add --legacy-export option to inspec export (#6661)
* support legacy export option
Signed-off-by: Sathish <sbabu@progress.com>
* ability to run legacy export option
Signed-off-by: Sathish <sbabu@progress.com>
---------
Signed-off-by: Sathish <sbabu@progress.com>
* Parse tags & refs from the ast nodes
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ENHANCE: Improve Desc collector to collect description
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ENHANCE: Only loop through the child node of begin block
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Fix bug/todo to handle duplicacy of control ids
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* TEST - a profile which fails to properly be exported but is likely to be used by MITRE
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
* Revert "FIX: Fix bug/todo to handle duplicacy of control ids"
This reverts commit 46d66e0026.
* Revert "ENHANCE: Only loop through the child node of begin block"
This reverts commit 47c92d8746.
* ADD: Add code key in control data
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ADD: Add source_location key in controls data
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* HACK: Update the location ref for the controls
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Update variable name as latest changes
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Fix source location ref for all controls in a file
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Improve tagcollector to handle other data types
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* FIX: Improve tagcollector to handle different types of tags
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* ENHANCE & TEST: Improve tag collector to collector different tag styles and add test for it
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* update groups
Signed-off-by: Sathish <sbabu@progress.com>
* Add yml data to export info_from_parse
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add inputs to export data info_from_parse
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Add status and status_messages
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* Initialize all control fields
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* make description `default` as a symbol
Signed-off-by: Sathish Babu <sbabu@progress.com>
* define `checks` as Set
Signed-off-by: Sathish Babu <sbabu@progress.com>
* Collect tests as part of collector
and store it in `checks`
Signed-off-by: Sathish Babu <sbabu@progress.com>
* refactor to read `ID` from controls which is an Array now unlike an Hash in `params.controls`
Signed-off-by: Sathish Babu <sbabu@progress.com>
* read yaml params from metadata
Signed-off-by: Sathish Babu <sbabu@progress.com>
* use to Array to simply DS as the o/p ie being converted to JSON
Signed-off-by: Sathish Babu <sbabu@progress.com>
* move old check as legacy check
Signed-off-by: Sathish Babu <sbabu@progress.com>
* support `legacy_check` as an option to run checks in legacy mode
Signed-off-by: Sathish Babu <sbabu@progress.com>
* fix tests to support `legacy_checks`
Signed-off-by: Sathish Babu <sbabu@progress.com>
* update document for check
Signed-off-by: Sathish Babu <sbabu@progress.com>
* Update usage doc for --legaccy-check
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
---------
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Signed-off-by: Sathish <sbabu@progress.com>
Signed-off-by: Sathish Babu <sbabu@progress.com>
Co-authored-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Sonu Saha <98935583+ahasunos@users.noreply.github.com>
Co-authored-by: Sonu Saha <sonu.saha@progress.com>
* LINT: Fix lint offense
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
* do not include tests to controls by default
Signed-off-by: Sathish Babu <sbabu@progress.com>
* generate info with tests for check
Signed-off-by: Sathish Babu <sbabu@progress.com>
---------
Signed-off-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Signed-off-by: Sonu Saha <sonu.saha@progress.com>
Signed-off-by: Sathish <sbabu@progress.com>
Signed-off-by: Sathish Babu <sbabu@progress.com>
Co-authored-by: Clinton Wolfe <clintoncwolfe@gmail.com>
Co-authored-by: Sathish <sbabu@progress.com>
Co-authored-by: Sathish Babu <80091550+sathish-progress@users.noreply.github.com>
Sonu Saha
Clinton Wolfe