mirror of https://github.com/inspec/inspec synced 2024-11-26 22:50:36 +00:00

History

Christoph Hartmann a6ef98c896 verifies that inspec.yml uses licenses in SPDX format Signed-off-by: Christoph Hartmann <chris@lollyrock.com>		2017-05-31 00:21:05 -05:00
..
controls	bugfix: dev-sec/ssl-benchmark -> ssl-baseline	2017-05-09 10:58:07 +02:00
inspec.yml	verifies that inspec.yml uses licenses in SPDX format	2017-05-31 00:21:05 -05:00
README.md	bugfix: dev-sec/ssl-benchmark -> ssl-baseline	2017-05-09 10:58:07 +02:00

README.md

meta-profile

The inspec.yml file in this profile shows how one can use dependencies from non-local sources such as Git or an HTTP url. This feature can be used to build up a environment-wide profile that is based on more specific profiles managed by others.

InSpec supports multiple profile locations:

depends:
  # defaults to supermarket
  - name: hardening/ssh-hardening  
  # remote tar or zip file
  - name: os-hardening
    url: https://github.com/dev-sec/tests-os-hardening/archive/master.zip
  # git
  - git: https://github.com/dev-sec/ssl-baseline.git
  - name: windows-patch-benchmark
    git: https://github.com/chris-rock/windows-patch-benchmark.git
  # Chef Compliance
  - name: linux
    compliance: base/linux

You could use those dependencies in your exmaple.rb:


include_controls 'hardening/ssh-hardening'
include_controls 'os-hardening'
include_controls 'ssl-baseline'
include_controls 'linux'
include_controls 'windows-patch-benchmark'

Further details are described in our InSpec Docs