inspec-core 4.18.51 → 4.18.85

data/lib/plugins/inspec-init/templates/profiles/gcp/attributes.yml

@@ -0,0 +1,2 @@
+# Below is to be uncommented and set with your GCP project ID:
+# gcp_project_id: 'your-gcp-project'

data/lib/plugins/inspec-init/templates/profiles/gcp/controls/example.rb

@@ -0,0 +1,27 @@
+# copyright: 2018, The Authors
+
+title "Sample Section"
+
+gcp_project_id = attribute("gcp_project_id")
+
+# you add controls here
+control "gcp-single-region-1.0" do                                                    # A unique ID for this control
+  impact 1.0                                                                          # The criticality, if this control fails.
+  title "Ensure single region has the correct properties."                            # A human-readable title
+  desc "An optional description..."
+  describe google_compute_region(project: gcp_project_id, name: "europe-west2") do    # The actual test
+    its("zone_names") { should include "europe-west2-a" }
+  end
+end
+
+# plural resources can be leveraged to loop across many resources
+control "gcp-regions-loop-1.0" do                                                     # A unique ID for this control
+  impact 1.0                                                                          # The criticality, if this control fails.
+  title "Ensure regions have the correct properties in bulk."                         # A human-readable title
+  desc "An optional description..."
+  google_compute_regions(project: gcp_project_id).region_names.each do |region_name|  # Loop across all regions by name
+    describe google_compute_region(project: gcp_project_id, name: region_name) do     # The test for a single region
+      it { should be_up }
+    end
+  end
+end

data/lib/plugins/inspec-init/templates/profiles/gcp/inspec.yml

@@ -0,0 +1,19 @@
+name: <%= name %>
+title: GCP InSpec Profile
+maintainer: The Authors
+copyright: The Authors
+copyright_email: you@example.com
+license: Apache-2.0
+summary: An InSpec Compliance Profile For GCP
+version: 0.1.0
+inspec_version: '>= 2.3.5'
+attributes:
+- name: gcp_project_id
+  required: true
+  description: 'The GCP project identifier.'
+  type: string
+depends:
+- name: inspec-gcp
+  url: https://github.com/inspec/inspec-gcp/archive/master.tar.gz
+supports:
+- platform: gcp

data/lib/source_readers/inspec.rb

@@ -12,7 +12,7 @@ module SourceReaders
       nil
     end
 
-    attr_reader :metadata, :tests, :libraries, :data_files
+    attr_reader :metadata, :tests, :libraries, :data_files, :target
 
     # This create a new instance of an InSpec profile source reader
     #

metadata

@@ -1,29 +1,15 @@
 --- !ruby/object:Gem::Specification
 name: inspec-core
 version: !ruby/object:Gem::Version
-  version: 4.18.51
+  version: 4.18.85
 platform: ruby
 authors:
-- Dominik Richter
+- Chef InSpec Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-12-11 00:00:00.000000000 Z
+date: 2020-02-06 00:00:00.000000000 Z
 dependencies:
-- !ruby/object:Gem::Dependency
-  name: train-core
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.0'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: chef-telemetry
   requirement: !ruby/object:Gem::Requirement
@@ -62,16 +48,22 @@ dependencies:
   name: thor
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0.20'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '0.20'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: json-schema
   requirement: !ruby/object:Gem::Requirement
@@ -106,14 +98,20 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.1'
+        version: '1.2'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.2.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.1'
+        version: '1.2'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.2.2
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -143,47 +141,47 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1.2'
 - !ruby/object:Gem::Dependency
-  name: hashie
+  name: pry
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.4'
+        version: '0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.4'
+        version: '0'
 - !ruby/object:Gem::Dependency
-  name: mixlib-log
+  name: hashie
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.4'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.4'
 - !ruby/object:Gem::Dependency
-  name: pry
+  name: mixlib-log
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: sslshake
   requirement: !ruby/object:Gem::Requirement
@@ -227,19 +225,33 @@ dependencies:
       - !ruby/object:Gem::Version
         version: 0.9.0
 - !ruby/object:Gem::Dependency
-  name: faraday_middleware
+  name: tty-table
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.10'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.10'
+- !ruby/object:Gem::Dependency
+  name: tty-prompt
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.12.2
+        version: '0.17'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.12.2
+        version: '0.17'
 - !ruby/object:Gem::Dependency
   name: tomlrb
   requirement: !ruby/object:Gem::Requirement
@@ -286,97 +298,89 @@ dependencies:
   name: semverse
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: htmlentities
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '4.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '4.3'
 - !ruby/object:Gem::Dependency
   name: multipart-post
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-- !ruby/object:Gem::Dependency
-  name: tty-table
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.10'
+        version: '2.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.10'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
-  name: tty-prompt
+  name: term-ansicolor
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.17'
+        version: '1.7'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.17'
+        version: '1.7'
 - !ruby/object:Gem::Dependency
-  name: term-ansicolor
+  name: train-core
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '3.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
-description: Core InSpec, local support only. See `inspec` for full support.
+        version: '3.0'
+description: InSpec provides a framework for creating end-to-end infrastructure tests.
+  You can use it for integration or even compliance testing. Create fully portable
+  test profiles and use them in your workflow to ensure stability and security. Integrate
+  InSpec in your change lifecycle for local testing, CI/CD, and deployment verification.
+  This has local support only. See the `inspec` gem for full support.
 email:
-- dominik.richter@gmail.com
+- inspec@chef.io
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- Gemfile
 - LICENSE
 - README.md
 - etc/deprecations.json
 - etc/plugin_filters.json
+- inspec-core.gemspec
 - lib/bundles/README.md
 - lib/bundles/inspec-compliance/api.rb
 - lib/bundles/inspec-compliance/configuration.rb
@@ -446,7 +450,6 @@ files:
 - lib/inspec/plugin/v1.rb
 - lib/inspec/plugin/v1/plugin_types/cli.rb
 - lib/inspec/plugin/v1/plugin_types/fetcher.rb
-- lib/inspec/plugin/v1/plugin_types/resource.rb
 - lib/inspec/plugin/v1/plugin_types/secret.rb
 - lib/inspec/plugin/v1/plugin_types/source_reader.rb
 - lib/inspec/plugin/v1/plugins.rb
@@ -682,10 +685,20 @@ files:
 - lib/plugins/inspec-init/templates/plugins/inspec-plugin-template/lib/inspec-plugin-template/cli_command.rb
 - lib/plugins/inspec-init/templates/plugins/inspec-plugin-template/lib/inspec-plugin-template/plugin.rb
 - lib/plugins/inspec-init/templates/plugins/inspec-plugin-template/lib/inspec-plugin-template/version.rb
+- lib/plugins/inspec-init/templates/profiles/aws/README.md
+- lib/plugins/inspec-init/templates/profiles/aws/attributes.yml
+- lib/plugins/inspec-init/templates/profiles/aws/controls/example.rb
+- lib/plugins/inspec-init/templates/profiles/aws/inspec.yml
+- lib/plugins/inspec-init/templates/profiles/azure/README.md
+- lib/plugins/inspec-init/templates/profiles/azure/controls/example.rb
+- lib/plugins/inspec-init/templates/profiles/azure/inspec.yml
+- lib/plugins/inspec-init/templates/profiles/gcp/README.md
+- lib/plugins/inspec-init/templates/profiles/gcp/attributes.yml
+- lib/plugins/inspec-init/templates/profiles/gcp/controls/example.rb
+- lib/plugins/inspec-init/templates/profiles/gcp/inspec.yml
 - lib/plugins/inspec-init/templates/profiles/os/README.md
 - lib/plugins/inspec-init/templates/profiles/os/controls/example.rb
 - lib/plugins/inspec-init/templates/profiles/os/inspec.yml
-- lib/plugins/inspec-init/templates/profiles/os/libraries/.gitkeep
 - lib/plugins/inspec-plugin-manager-cli/README.md
 - lib/plugins/inspec-plugin-manager-cli/lib/inspec-plugin-manager-cli.rb
 - lib/plugins/inspec-plugin-manager-cli/lib/inspec-plugin-manager-cli/cli_command.rb
@@ -694,7 +707,7 @@ files:
 - lib/plugins/things-for-train-integration.rb
 - lib/source_readers/flat.rb
 - lib/source_readers/inspec.rb
-homepage: https://github.com/chef/inspec
+homepage: https://github.com/inspec/inspec
 licenses:
 - Apache-2.0
 metadata: {}
@@ -704,7 +717,7 @@ require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - "~>"
     - !ruby/object:Gem::Version
       version: '2.4'
 required_rubygems_version: !ruby/object:Gem::Requirement
@@ -716,5 +729,5 @@ requirements: []
 rubygems_version: 3.0.3
 signing_key: 
 specification_version: 4
-summary: Just InSpec
+summary: Infrastructure and compliance testing. Core library.
 test_files: []

data/lib/inspec/plugin/v1/plugin_types/resource.rb

@@ -1,176 +0,0 @@
-require "inspec/exceptions"
-
-module Inspec
-  module ResourceBehaviors
-    def to_s
-      @__resource_name__
-    end
-
-    # Overwrite inspect to provide better output to RSpec results.
-    #
-    # @return [String] full name of the resource
-    def inspect
-      to_s
-    end
-  end
-
-  module ResourceDSL
-    def name(name = nil)
-      return @name if name.nil?
-
-      @name = name
-      __register(name, self)
-    end
-
-    def desc(description = nil)
-      return if description.nil?
-
-      __resource_registry[@name].desc(description)
-    end
-
-    def supports(criteria = nil)
-      return if criteria.nil?
-
-      key = @name.to_sym
-
-      Inspec::Resource.supports[key] ||= []
-      Inspec::Resource.supports[key].push(criteria)
-    end
-
-    def example(example = nil)
-      return if example.nil?
-
-      __resource_registry[@name].example(example)
-    end
-
-    # Support for Resource DSL plugins.
-    # This is called when an unknown method is encountered
-    # within a resource class definition.
-    # Even tho this is defined as an instance method, it gets added to
-    # Inspec::Plugins::Resource via `extend`, so this is actually a class defintion.
-    def method_missing(method_name, *arguments, &block)
-      require "inspec/plugin/v2"
-      # Check to see if there is a resource_dsl plugin activator hook with the method name
-      registry = Inspec::Plugin::V2::Registry.instance
-      hook = registry.find_activators(plugin_type: :resource_dsl, activator_name: method_name).first
-      if hook
-        # OK, load the hook if it hasn't been already.  We'll then know a module,
-        # which we can then inject into the resource
-        hook.activate
-        # Inject the module's methods into the resource as class methods.
-        # implementation_class is the field name, but this is actually a module.
-        extend(hook.implementation_class)
-        # Now that the module is loaded, it defined one or more methods
-        # (presumably the one we were looking for.)
-        # We still haven't called it, so do so now.
-        send(method_name, *arguments, &block)
-      else
-        # If we couldn't find a plugin to match, maybe something up above has it,
-        # or maybe it is just a unknown method error.
-        super
-      end
-    end
-
-    def __resource_registry
-      Inspec::Resource.registry
-    end
-
-    def __register(name, obj) # rubocop:disable Metrics/AbcSize, Metrics/MethodLength, Metrics/CyclomaticComplexity, Metrics/PerceivedComplexity
-      cl = Class.new(obj) do # rubocop:disable Metrics/BlockLength
-        attr_reader :resource_exception_message
-
-        def initialize(backend, name, *args)
-          @resource_skipped = false
-          @resource_failed = false
-          @supports = Inspec::Resource.supports[name.to_sym]
-          @resource_exception_message = nil
-
-          # attach the backend to this instance
-          @__backend_runner__ = backend
-          @__resource_name__ = name
-
-          # check resource supports
-          supported = @supports ? check_supports : true # check_supports has side effects!
-          test_backend = defined?(Train::Transports::Mock::Connection) && backend.backend.class == Train::Transports::Mock::Connection
-          # raise unless we are supported or in test
-          unless supported || test_backend
-            msg = "Unsupported resource/backend combination: %s / %s. Exiting." %
-              [name, backend.platform.name]
-            raise ArgumentError, msg
-          end
-
-          # call the resource initializer
-          begin
-            super(*args)
-          rescue Inspec::Exceptions::ResourceSkipped => e
-            skip_resource(e.message)
-          rescue Inspec::Exceptions::ResourceFailed => e
-            fail_resource(e.message)
-          rescue NotImplementedError => e
-            fail_resource(e.message) unless @resource_failed
-          rescue NoMethodError => e
-            skip_resource(e.message) unless @resource_failed
-          end
-        end
-
-        def self.desc(description = nil)
-          return @description if description.nil?
-
-          @description = description
-        end
-
-        def self.example(example = nil)
-          return @example if example.nil?
-
-          @example = example
-        end
-
-        def check_supports
-          require "inspec/resources/platform"
-          status = inspec.platform.supported?(@supports)
-          fail_msg = "Resource `#{@__resource_name__}` is not supported on platform #{inspec.platform.name}/#{inspec.platform.release}."
-          fail_resource(fail_msg) unless status
-          status
-        end
-
-        def skip_resource(message)
-          @resource_skipped = true
-          @resource_exception_message = message
-        end
-
-        def resource_skipped?
-          @resource_skipped
-        end
-
-        def fail_resource(message)
-          @resource_failed = true
-          @resource_exception_message = message
-        end
-
-        def resource_failed?
-          @resource_failed
-        end
-
-        def inspec
-          @__backend_runner__
-        end
-      end
-
-      # rubocop:enable Lint/NestedMethodDefinition
-
-      # Warn if a resource pack is overwriting a core resource.
-      # Suppress warning if the resource is an AWS resource, see #3822
-      if __resource_registry.key?(name) && !name.start_with?("aws_")
-        Inspec::Log.warn("Overwriting resource #{name}. To reference a specific version of #{name} use the resource() method")
-      end
-      __resource_registry[name] = cl
-    end
-  end
-
-  module Plugins
-    class Resource # TODO: possibly push up to inspec/resource.rb
-      extend Inspec::ResourceDSL
-      include Inspec::ResourceBehaviors
-    end
-  end
-end