inspec 1.0.0 → 1.35.1

data/docs/cli.md

@@ -1,342 +0,0 @@
----
-title: About the InSpec CLI
----
-
-# InSpec CLI
-
-Use the InSpec CLI to run tests and audits against targets using local, SSH, WinRM, or Docker connections.
-
-## archive
-
-Archive a profile to tar.gz (default) or zip
-
-### Syntax
-
-This subcommand has the following syntax:
-
-```bash
-$ inspec archive PATH
-```
-
-### Options
-
-This subcommand has additional options:
-
-* ``--ignore-errors``, ``--no-ignore-errors``  
-    Ignore profile warnings.
-* ``-o``, ``--output=OUTPUT``  
-    Save the archive to a path
-* ``--overwrite``, ``--no-overwrite``  
-    Overwrite existing archive.
-* ``--profiles-path=PROFILES_PATH``  
-    Folder which contains referenced profiles.
-* ``--tar``, ``--no-tar``  
-    Generates a tar.gz archive.
-* ``--zip``, ``--no-zip``  
-    Generates a zip archive.
-
-## check
-
-Verify all tests at the specified path
-
-### Syntax
-
-This subcommand has the following syntax:
-
-```bash
-$ inspec check PATH
-```
-
-### Options
-
-This subcommand has additional options:
-
-* ``--format=FORMAT``  
-    
-* ``--profiles-path=PROFILES_PATH``  
-    Folder which contains referenced profiles.
-
-## compliance
-
-Chef compliance commands
-
-### Syntax
-
-This subcommand has the following syntax:
-
-```bash
-$ inspec compliance SUBCOMMAND ...
-```
-
-## detect
-
-Detect the target os
-
-### Syntax
-
-This subcommand has the following syntax:
-
-```bash
-$ inspec detect
-```
-
-### Options
-
-This subcommand has additional options:
-
-* ``-b``, ``--backend=BACKEND``  
-    Choose a backend: local, ssh, winrm, docker.
-* ``--format=FORMAT``  
-    
-* ``--host=HOST``  
-    Specify a remote host which is tested.
-* ``--json-config=JSON_CONFIG``  
-    Read configuration from JSON file (`-` reads from stdin).
-* ``-i``, ``--key-files=one two three``  
-    Login key or certificate file for a remote scan.
-* ``-l``, ``--log-level=LOG_LEVEL``  
-    Set the log level: info (default), debug, warn, error
-* ``--password=PASSWORD``  
-    Login password for a remote scan, if required.
-* ``--path=PATH``  
-    Login path to use when connecting to the target (WinRM).
-* ``-p``, ``--port=N``  
-    Specify the login port for a remote scan.
-* ``--self-signed``, ``--no-self-signed``  
-    Allow remote scans with self-signed certificates (WinRM).
-* ``--ssl``, ``--no-ssl``  
-    Use SSL for transport layer encryption (WinRM).
-* ``--sudo``, ``--no-sudo``  
-    Run scans with sudo. Only activates on Unix and non-root user.
-* ``--sudo-command=SUDO_COMMAND``  
-    Alternate command for sudo.
-* ``--sudo-options=SUDO_OPTIONS``  
-    Additional sudo options for a remote scan.
-* ``--sudo-password=SUDO_PASSWORD``  
-    Specify a sudo password, if it is required.
-* ``-t``, ``--target=TARGET``  
-    Simple targeting option using URIs, e.g. ssh://user:pass@host:port
-* ``--user=USER``  
-    The login user for a remote scan.
-
-## env
-
-Output shell-appropriate completion configuration
-
-### Syntax
-
-This subcommand has the following syntax:
-
-```bash
-$ inspec env
-```
-
-## exec
-
-Run all test files at the specified path.
-
-### Syntax
-
-This subcommand has the following syntax:
-
-```bash
-$ inspec exec PATHS
-```
-
-### Options
-
-This subcommand has additional options:
-
-* ``--attrs=one two three``  
-    Load attributes file (experimental)
-* ``-b``, ``--backend=BACKEND``  
-    Choose a backend: local, ssh, winrm, docker.
-* ``--cache=CACHE``  
-    Use the given path for caching dependencies. (default: ~/.inspec/cache)
-* ``--color``, ``--no-color``  
-    Use colors in output.
-* ``--controls=one two three``  
-    A list of controls to run. Ignore all other tests.
-* ``--create-lockfile``, ``--no-create-lockfile``  
-    Write out a lockfile based on this execution (unless one already exists)
-* ``--format=FORMAT``  
-    Which formatter to use: cli, progress, documentation, json, json-min
-* ``--host=HOST``  
-    Specify a remote host which is tested.
-* ``--json-config=JSON_CONFIG``  
-    Read configuration from JSON file (`-` reads from stdin).
-* ``-i``, ``--key-files=one two three``  
-    Login key or certificate file for a remote scan.
-* ``-l``, ``--log-level=LOG_LEVEL``  
-    Set the log level: info (default), debug, warn, error
-* ``--password=PASSWORD``  
-    Login password for a remote scan, if required.
-* ``--path=PATH``  
-    Login path to use when connecting to the target (WinRM).
-* ``-p``, ``--port=N``  
-    Specify the login port for a remote scan.
-* ``--profiles-path=PROFILES_PATH``  
-    Folder which contains referenced profiles.
-* ``--self-signed``, ``--no-self-signed``  
-    Allow remote scans with self-signed certificates (WinRM).
-* ``--ssl``, ``--no-ssl``  
-    Use SSL for transport layer encryption (WinRM).
-* ``--sudo``, ``--no-sudo``  
-    Run scans with sudo. Only activates on Unix and non-root user.
-* ``--sudo-command=SUDO_COMMAND``  
-    Alternate command for sudo.
-* ``--sudo-options=SUDO_OPTIONS``  
-    Additional sudo options for a remote scan.
-* ``--sudo-password=SUDO_PASSWORD``  
-    Specify a sudo password, if it is required.
-* ``-t``, ``--target=TARGET``  
-    Simple targeting option using URIs, e.g. ssh://user:pass@host:port
-* ``--user=USER``  
-    The login user for a remote scan.
-
-## help
-
-Describe available commands or one specific command
-
-### Syntax
-
-This subcommand has the following syntax:
-
-```bash
-$ inspec help [COMMAND]
-```
-
-## init
-
-Scaffolds a new project
-
-### Syntax
-
-This subcommand has the following syntax:
-
-```bash
-$ inspec init TEMPLATE ...
-```
-
-## json
-
-Read all tests in path and generate a json summary
-
-### Syntax
-
-This subcommand has the following syntax:
-
-```bash
-$ inspec json PATH
-```
-
-### Options
-
-This subcommand has additional options:
-
-* ``--controls=one two three``  
-    A list of controls to include. Ignore all other tests.
-* ``-o``, ``--output=OUTPUT``  
-    Save the created profile to a path
-* ``--profiles-path=PROFILES_PATH``  
-    Folder which contains referenced profiles.
-
-## msccm
-
-Microsoft systems center configuration manager commands
-
-### Syntax
-
-This subcommand has the following syntax:
-
-```bash
-$ inspec msccm SUBCOMMAND ...
-```
-
-## shell
-
-Open an interactive debugging shell
-
-### Syntax
-
-This subcommand has the following syntax:
-
-```bash
-$ inspec shell
-```
-
-### Options
-
-This subcommand has additional options:
-
-* ``-b``, ``--backend=BACKEND``  
-    Choose a backend: local, ssh, winrm, docker.
-* ``-c``, ``--command=COMMAND``  
-    A single command string to run instead of launching the shell
-* ``--host=HOST``  
-    Specify a remote host which is tested.
-* ``--json-config=JSON_CONFIG``  
-    Read configuration from JSON file (`-` reads from stdin).
-* ``-i``, ``--key-files=one two three``  
-    Login key or certificate file for a remote scan.
-* ``-l``, ``--log-level=LOG_LEVEL``  
-    Set the log level: info (default), debug, warn, error
-* ``--password=PASSWORD``  
-    Login password for a remote scan, if required.
-* ``--path=PATH``  
-    Login path to use when connecting to the target (WinRM).
-* ``-p``, ``--port=N``  
-    Specify the login port for a remote scan.
-* ``--self-signed``, ``--no-self-signed``  
-    Allow remote scans with self-signed certificates (WinRM).
-* ``--ssl``, ``--no-ssl``  
-    Use SSL for transport layer encryption (WinRM).
-* ``--sudo``, ``--no-sudo``  
-    Run scans with sudo. Only activates on Unix and non-root user.
-* ``--sudo-command=SUDO_COMMAND``  
-    Alternate command for sudo.
-* ``--sudo-options=SUDO_OPTIONS``  
-    Additional sudo options for a remote scan.
-* ``--sudo-password=SUDO_PASSWORD``  
-    Specify a sudo password, if it is required.
-* ``-t``, ``--target=TARGET``  
-    Simple targeting option using URIs, e.g. ssh://user:pass@host:port
-* ``--user=USER``  
-    The login user for a remote scan.
-
-## supermarket
-
-Supermarket commands
-
-### Syntax
-
-This subcommand has the following syntax:
-
-```bash
-$ inspec supermarket SUBCOMMAND ...
-```
-
-## vendor
-
-Download all dependencies and generate a lockfile
-
-### Syntax
-
-This subcommand has the following syntax:
-
-```bash
-$ inspec vendor
-```
-
-## version
-
-Prints the version of this tool
-
-### Syntax
-
-This subcommand has the following syntax:
-
-```bash
-$ inspec version
-```
-

data/docs/resources/process.md.erb

@@ -1,73 +0,0 @@
----
-title: About the processes Resource
----
-
-# processes
-
-Use the `processes` InSpec audit resource to test properties for programs that are running on the system.
-
-# Syntax
-
-A `processes` resource block declares the name of the process to be tested, and then declares one (or more) property/value pairs:
-
-    describe processes('process_name') do
-      its('property_name') { should eq ['property_value'] }
-    end
-
-where
-
-* `processes('process_name')` must specify the name of a process that is running on the system
-* `property_name` may be used to test user (`its('users')`) and state properties (`its('states')`)
-
-
-# Matchers
-
-This InSpec audit resource has the following matchers:
-
-## be
-
-<%= partial "/shared/matcher_be" %>
-
-## cmp
-
-<%= partial "/shared/matcher_cmp" %>
-
-## eq
-
-<%= partial "/shared/matcher_eq" %>
-
-## include
-
-<%= partial "/shared/matcher_include" %>
-
-## match
-
-<%= partial "/shared/matcher_match" %>
-
-## property_name
-
-The `property_name` matcher tests the named property for the specified value:
-
-    its('property_name') { should eq ['property_value'] }
-
-# Examples
-
-The following examples show how to use this InSpec audit resource.
-
-## Test if the list length for the mysqld process is 1
-
-    describe processes('mysqld') do
-      its('list.length') { should eq 1 }
-    end
-
-## Test if the init process is owned by the root user
-
-    describe processes('init') do
-      its('users') { should eq ['root'] }
-    end
-
-## Test if a high-priority process is running
-
-    describe processes('some_process') do
-      its('states') { should eq ['R<'] }
-    end