mirror of
https://github.com/inspec/inspec
synced 2024-12-24 03:53:15 +00:00
212 lines
6.8 KiB
Text
212 lines
6.8 KiB
Text
---
|
|
title: InSpec - Audit and Test Framework
|
|
---
|
|
|
|
/! animated banner
|
|
header.blue-gradient.margin-top-offset
|
|
.h-top.strict-center.purp-shade
|
|
h1.columns.t-white.strict-center data-enllax-ratio=".1" data-enllax-type="foreground" InSpec is compliance as code
|
|
img.grid-animate.strict-center style="opacity:0.8" src="/images/home/web.svg" /
|
|
/! diamond image
|
|
img.strict-center.bright-animate.3d-animate src="/images/home/diamond.png" /
|
|
/! canvas elements
|
|
#particles-js
|
|
canvas.particles-js-canvas-el /
|
|
/! style for callout icons
|
|
.row
|
|
.icon.shadow.hide-for-small-only
|
|
img src="/images/circ-arrow.svg" /
|
|
|
|
/! Event Details go here
|
|
.code-pop
|
|
.strict-center
|
|
p.t-white
|
|
| Free Continuous Compliance Workshop in NYC - Monday, May 8
|
|
a href="https://events.chef.io/events/continuous-compliance-workshop/" target="_blank" Join us!
|
|
|
|
/! Second Content
|
|
.row.margin-both
|
|
.large-9.medium-9.columns data-enllax-ratio=".1" data-enllax-type="foreground"
|
|
|
|
h2.txt-margin Automated testing, codified
|
|
p#icon-trigger
|
|
| InSpec is an open-source testing framework for infrastructure with a human-readable language for specifying compliance, security and other policy requirements. Easily integrate automated tests that check for adherence to policy into any stage of your deployment pipeline.
|
|
|
|
/! Third Content
|
|
#icon-trigger.row.strict-center.margin-under-xs
|
|
.large-12.columns
|
|
hr.first/
|
|
small FEATURES OF INSPEC
|
|
h2.txt-margin InSpec is compliance by design
|
|
hr.first/
|
|
/! images with text - grid of 4
|
|
.row.strict-center.margin-under
|
|
.large-3.medium-3.columns.strict-center
|
|
img.floating.icon-art src="/images/home/platform.svg" /
|
|
h3 Platform Agnostic
|
|
p
|
|
| InSpec supports all major operating systems and many applications out of the box.
|
|
.large-3.medium-3.columns.strict-center
|
|
img.icon-art src="/images/home/free.svg" /
|
|
h3 Free to run anywhere
|
|
p
|
|
| InSpec is a language that can easily express compliance as code, with the freedom to run anywhere.
|
|
.large-3.medium-3.columns.strict-center
|
|
img.icon-art src="/images/home/test.svg" /
|
|
h3 Test locally or remotely
|
|
p
|
|
| InSpec provides a local agent, as well as full remote testing support.
|
|
.large-3.medium-3.columns.strict-center
|
|
img.icon-art src="/images/home/language.svg" /
|
|
h3 Extensible language
|
|
p
|
|
| Easily extend the InSpec language to cover new operating systems, devices, or applications.
|
|
|
|
/! Fourth Content
|
|
/! style for callout icons
|
|
.row
|
|
.icon.shadow
|
|
img src="/images/circ-arrow.svg" /
|
|
.block-angl.blue-gradient
|
|
.section.purp-shade
|
|
|
|
.row.relative-top
|
|
.large-7.medium-7.columns.margin-top-xl.margin-under-xs data-enllax-ratio=".1" data-enllax-type="foreground"
|
|
|
|
small.t-dk Inspec for compliance
|
|
h2.t-white
|
|
| Transform your compliance and security requirements into simple code
|
|
#particles-second
|
|
canvas.particles-js-canvas-el
|
|
.row
|
|
.large-5.medium-5.columns.margin-under-xs
|
|
|
|
h3.t-white
|
|
|
|
i.focus.t-dk ⪢
|
|
| Codify agreements
|
|
p.t-white
|
|
| Combine profiles and customize them with overlays. Pick controls and define exceptions as code.
|
|
|
|
h3.t-white
|
|
|
|
i.focus.t-dk ⪢
|
|
| Add context to your tests
|
|
p.t-white
|
|
| Utilize many fields like descriptions, tags, and impact.
|
|
|
|
h3.t-white
|
|
|
|
i.focus.t-dk ⪢
|
|
| Apply to all systems
|
|
p.t-white
|
|
| Analyze everything using the same codified profiles and controls.
|
|
/! code
|
|
.large-6.medium-6.columns
|
|
.code-example.shadow.relative-top.margin-under
|
|
code.code-demo
|
|
span.code-attribute control
|
|
| 'sshd-21'
|
|
span.code-attribute do
|
|
br/
|
|
span.code-token.indent title
|
|
| 'Set SSH Protocol to 2'
|
|
br/
|
|
span.code-token.indent desc
|
|
| 'A detailed description'
|
|
br/
|
|
span.code-token.indent impact
|
|
| 1.0 # This is critical
|
|
br/
|
|
span.code-token.indent ref
|
|
| 'compliance guide, section 2.1'
|
|
br/
|
|
br/
|
|
span.code-attribute.indent describe
|
|
|
|
| sshd_config
|
|
|
|
span.code-attribute do
|
|
br/
|
|
span.code-attribute.indent its
|
|
| ('Protocol') { should cmp 2 }
|
|
br/
|
|
span.code-attribute.indent end
|
|
br/
|
|
span.code-attribute end
|
|
|
|
a.btn.strict-right.t-white.try-demo.mobile-hide href="/tutorial" Try the Demo
|
|
/! Next row
|
|
.row
|
|
.large-6.medium-6.columns.margin-under-xs data-enllax-ratio=".1" data-enllax-type="foreground"
|
|
|
|
small.t-dk Inspec for infrastructure
|
|
h2.t-white
|
|
| Solve your infrastructure testing needs simply and efficiently
|
|
.row
|
|
.large-5.medium-5.columns.margin-under-xs
|
|
|
|
h3.t-white
|
|
i.focus.t-dk ⪢
|
|
| Test the desired state
|
|
p.t-white Verify your infrastructure matches your expectations.
|
|
h3.t-white
|
|
|
|
i.focus.t-dk ⪢
|
|
| Use simple and expressive code
|
|
p.t-white
|
|
| Reduce friction by writing tests that are easy to understand by anyone.
|
|
|
|
h3.t-white
|
|
|
|
i.focus.t-dk ⪢
|
|
| Test any system anywhere
|
|
p.t-white
|
|
| Run tests locally or remotely on all major operating systems and configurations.
|
|
|
|
h3.t-white
|
|
|
|
i.focus.t-dk ⪢
|
|
| Extensible
|
|
p.t-white
|
|
| Create custom resources with ease and share them.
|
|
/! code
|
|
.large-6.medium-6.columns
|
|
.code-example.shadow.relative-top.margin-under
|
|
code.code-demo
|
|
span.code-attribute describe
|
|
|
|
| file('/etc/myapp.conf')
|
|
|
|
span.code-attribute do
|
|
br/
|
|
span.code-attribute.indent it
|
|
| { should exist }
|
|
br/
|
|
span.code-attribute.indent its
|
|
| ('mode') { should cmp 0644 }
|
|
br/
|
|
span.code-attribute end
|
|
br/
|
|
br/
|
|
span.code-attribute describe
|
|
| myapp.conf
|
|
span.code-attribute do
|
|
br/
|
|
span.code-attribute.indent its
|
|
| ('port') { should cmp 8080 }
|
|
br/
|
|
span.code-attribute end
|
|
br/
|
|
br/
|
|
span.code-attribute describe
|
|
| port(8080)
|
|
span.code-attribute do
|
|
br/
|
|
span.code-attribute.indent it
|
|
| { should be_listening }
|
|
br/
|
|
span.code-attribute end
|
|
a.btn.strict-right.t-white.try-demo.mobile-hide href="/tutorial" Try the Demo
|
|
|
|
|