mirror of
https://github.com/inspec/inspec
synced 2024-11-23 13:13:22 +00:00
120 lines
3.8 KiB
Ruby
120 lines
3.8 KiB
Ruby
require "functional/helper"
|
|
require "tmpdir"
|
|
|
|
describe "inspec check" do
|
|
include FunctionalHelper
|
|
|
|
parallelize_me!
|
|
|
|
describe "inspec check with json formatter" do
|
|
it "can check a profile and produce valid JSON" do
|
|
out = inspec("check " + example_profile + " --format json")
|
|
|
|
JSON.parse(out.stdout)
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
|
|
describe "inspec check with special characters in path" do
|
|
it "can check a profile with special characters in its path" do
|
|
out = inspec("check " + File.join(profile_path, "{{special-path}}"))
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
|
|
describe "inspec check with skipping/failing a resource in FilterTable" do
|
|
it "can check a profile containing resource exceptions" do
|
|
out = inspec("check " + File.join(profile_path, "profile-with-resource-exceptions"))
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
|
|
describe "inspec check with a profile containing only_if" do
|
|
it "ignores the `only_if`" do
|
|
out = inspec("check " + File.join(profile_path, "only-if-os-nope"))
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
|
|
describe "inspec check with a aws profile" do
|
|
it "ignore train connection error" do
|
|
out = inspec("check " + File.join(examples_path, "profile-aws"))
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
|
|
describe "inspec check with a azure profile" do
|
|
it "ignore train connection error" do
|
|
out = inspec("check " + File.join(examples_path, "profile-azure"))
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
|
|
describe "inspec check with alternate cache dir" do
|
|
it "writes to the alternate cache dir" do
|
|
Dir.mktmpdir do |tmpdir|
|
|
cache_dir = File.join(tmpdir, "inspec_check_test_cache")
|
|
File.exist?(cache_dir).must_equal false
|
|
|
|
out = inspec("check " + integration_test_path + " --vendor-cache " + cache_dir)
|
|
|
|
File.exist?(cache_dir).must_equal true
|
|
assert_exit_code 0, out
|
|
end
|
|
end
|
|
end
|
|
|
|
describe "inspec check for lockfile and dependencies" do
|
|
it "can check a profile where a lock file is not required" do
|
|
out = inspec("check " + File.join(profile_path, "profile-lock-notrequired"))
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
|
|
it "can check a profile where a lock file is required" do
|
|
out = inspec("check " + File.join(profile_path, "profile-lock-required"))
|
|
|
|
out.stdout.must_include "profile needs to be vendored with `inspec vendor`."
|
|
assert_exit_code 1, out
|
|
end
|
|
|
|
it "can check a profile where lock file and inspec.yml are in synnc" do
|
|
out = inspec("check " + File.join(profile_path, "profile-lock-insync"))
|
|
|
|
assert_exit_code 0, out
|
|
end
|
|
|
|
it "can check a profile where lock file and inspec.yml are in not synnc" do
|
|
out = inspec("check " + File.join(profile_path, "profile-lock-outofsync"))
|
|
|
|
out.stdout.must_include "inspec.yml and inspec.lock are out-of-sync. Please re-vendor with `inspec vendor`."
|
|
out.stdout.must_include "Cannot find linux-baseline in lockfile. Please re-vendor with `inspec vendor`."
|
|
assert_exit_code 1, out
|
|
end
|
|
end
|
|
|
|
describe "inspec check with invalid `include_controls` reference" do
|
|
it "raises an error matching /Cannot load 'invalid_name'/" do
|
|
invalid_profile = File.join(profile_path, "invalid-include-controls")
|
|
out = inspec("check " + invalid_profile)
|
|
|
|
out.stderr.must_match(/Cannot load 'no_such_profile'/)
|
|
out.stderr.must_match(/not listed as a dependency/)
|
|
assert_exit_code 1, out
|
|
end
|
|
end
|
|
|
|
describe "inspec check with unsatisfied runtime version constraint" do
|
|
it "should enforce runtime version constraint" do
|
|
out = inspec("check #{profile_path}/unsupported_inspec")
|
|
out.stdout.must_include "The current inspec version #{Inspec::VERSION}"
|
|
out.stdout.must_include ">= 99.0.0"
|
|
assert_exit_code 1, out
|
|
end
|
|
end
|
|
end
|