mirror of https://github.com/inspec/inspec synced 2024-11-30 16:39:20 +00:00

History

Miah Johnson 659b4b373a Remove `# encoding: utf8` magic comments Signed-off-by: Miah Johnson <miah@chia-pet.org>		2019-05-07 16:06:23 -07:00
..
controls	Remove `# encoding: utf8` magic comments	2019-05-07 16:06:23 -07:00
inspec.yml	verifies that inspec.yml uses licenses in SPDX format	2017-05-31 00:21:05 -05:00
README.md	Fixes typo. (#2047 )	2017-08-17 15:13:44 -04:00

README.md

meta-profile

The inspec.yml file in this profile shows how one can use dependencies from non-local sources such as Git or an HTTP url. This feature can be used to build up a environment-wide profile that is based on more specific profiles managed by others.

InSpec supports multiple profile locations:

depends:
  # defaults to supermarket
  - name: hardening/ssh-hardening  
  # remote tar or zip file
  - name: os-hardening
    url: https://github.com/dev-sec/tests-os-hardening/archive/master.zip
  # git
  - git: https://github.com/dev-sec/ssl-baseline.git
  - name: windows-patch-benchmark
    git: https://github.com/chris-rock/windows-patch-benchmark.git
  # Chef Compliance
  - name: linux
    compliance: base/linux

You could use those dependencies in your example.rb:


include_controls 'hardening/ssh-hardening'
include_controls 'os-hardening'
include_controls 'ssl-baseline'
include_controls 'linux'
include_controls 'windows-patch-benchmark'

Further details are described in our InSpec Docs