mirror of https://github.com/inspec/inspec synced 2024-11-16 09:48:02 +00:00

History

Christoph Hartmann c2d92d8e86 use new devsec baseline Signed-off-by: Christoph Hartmann <chris@lollyrock.com>		2017-01-25 20:22:38 +01:00
..
controls	use new devsec baseline	2017-01-25 20:22:38 +01:00
inspec.yml	use new devsec baseline	2017-01-25 20:22:38 +01:00
README.md	add functional tests	2016-11-09 11:49:51 -06:00

README.md

meta-profile

The inspec.yml file in this profile shows how one can use dependencies from non-local sources such as Git or an HTTP url. This feature can be used to build up a environment-wide profile that is based on more specific profiles managed by others.

InSpec supports multiple profile locations:

depends:
  # defaults to supermarket
  - name: hardening/ssh-hardening  
  # remote tar or zip file
  - name: os-hardening
    url: https://github.com/dev-sec/tests-os-hardening/archive/master.zip
  # git
  - git: https://github.com/dev-sec/ssl-benchmark.git
  - name: windows-patch-benchmark
    git: https://github.com/chris-rock/windows-patch-benchmark.git
  # Chef Compliance
  - name: linux
    compliance: base/linux

You could use those dependencies in your exmaple.rb:


include_controls 'hardening/ssh-hardening'
include_controls 'os-hardening'
include_controls 'ssl-benchmark'
include_controls 'linux'
include_controls 'windows-patch-benchmark'

Further details are described in our InSpec Docs