mirror of
https://github.com/inspec/inspec
synced 2024-12-18 09:03:12 +00:00
27b80e0998
* ✓ adds additional checks for vendored profiles This PR adds additional checks to verify if: - inspec.yml and inspec.lock dependencies are out-of-sync - complains about a missing lock file if we have dependencies defined * skip if legacy profile path is used * Fix unit tests. * Force static sha256 for lock files and protect from unnamed depends. * Add vendor profiles for checks. Windows downloads with different sha256.
8 lines
243 B
Text
8 lines
243 B
Text
---
|
|
lockfile_version: 1
|
|
depends:
|
|
- name: ssh-baseline
|
|
resolved_source:
|
|
url: https://github.com/dev-sec/ssh-baseline/archive/2.3.0.zip
|
|
sha256: f15d94086d07cb81d2a69b2b774135b1dbfd1c1918415aec7d266658aecfb47a
|
|
version_constraints: []
|