inspec 1.31.0 → 1.45.9

data/lib/bundles/inspec-compliance/cli.rb

@@ -18,100 +18,90 @@ module Compliance
       namespace
     end
 
-    desc "login SERVER --insecure --user='USER' --token='TOKEN'", 'Log in to a Chef Compliance SERVER'
+    desc "login https://SERVER --insecure --user='USER' --ent='ENTERPRISE' --token='TOKEN'", 'Log in to a Chef Compliance/Chef Automate SERVER'
+    long_desc <<-LONGDESC
+      `login` allows you to use InSpec with Chef Automate or a Chef Compliance Server
+
+      You need to a token for communication. More information about token retrieval
+      is available at:
+        https://docs.chef.io/api_automate.html#authentication-methods
+        https://docs.chef.io/api_compliance.html#obtaining-an-api-token
+    LONGDESC
     option :insecure, aliases: :k, type: :boolean,
       desc: 'Explicitly allows InSpec to perform "insecure" SSL connections and transfers'
     option :user, type: :string, required: false,
-      desc: 'Chef Compliance Username'
+      desc: 'Username'
     option :password, type: :string, required: false,
-      desc: 'Chef Compliance Password'
-    option :apipath, type: :string, default: '/api',
-      desc: 'Set the path to the API, defaults to /api'
+      desc: 'Password (Chef Compliance Only)'
     option :token, type: :string, required: false,
-      desc: 'Chef Compliance access token'
+      desc: 'Access token'
     option :refresh_token, type: :string, required: false,
-      desc: 'Chef Compliance refresh token'
-    def login(server) # rubocop:disable Metrics/AbcSize
-      # show warning if the Compliance Server does not support
-
+      desc: 'Chef Compliance refresh token (Chef Compliance Only)'
+    option :dctoken, type: :string, required: false,
+      desc: 'Data Collector token (Chef Automate Only)'
+    option :ent, type: :string, required: false,
+      desc: 'Enterprise for Chef Automate reporting (Chef Automate Only)'
+    def login(server)
       options['server'] = server
-      url = options['server'] + options['apipath']
-
-      if !options['user'].nil? && !options['password'].nil?
-        # username / password
-        _success, msg = login_username_password(url, options['user'], options['password'], options['insecure'])
-      elsif !options['user'].nil? && !options['token'].nil?
-        # access token
-        _success, msg = store_access_token(url, options['user'], options['token'], options['insecure'])
-      elsif !options['refresh_token'].nil? && !options['user'].nil?
-        # refresh token
-        _success, msg = store_refresh_token(url, options['refresh_token'], true, options['user'], options['insecure'])
-        # TODO: we should login with the refreshtoken here
-      elsif !options['refresh_token'].nil?
-        _success, msg = login_refreshtoken(url, options)
-      else
-        puts 'Please run `inspec compliance login SERVER` with options --token or --refresh_token, --user, and --insecure or --not-insecure'
-        exit 1
-      end
-
-      puts '', msg
+      Compliance::API.login(options)
     end
 
-    desc "login_automate SERVER --insecure --user='USER' --ent='ENT' --usertoken='TOKEN'", 'Log in to an Automate SERVER'
+    desc "login_automate https://SERVER --insecure --user='USER' --ent='ENTERPRISE' --usertoken='TOKEN'", 'Log in to a Chef Automate SERVER (DEPRECATED: Please use `login`)'
     long_desc <<-LONGDESC
-      `login_automate` allows you to use InSpec with Chef Automate
+      This commmand is deprecated and will be removed, please use `--login`.
+
+      `login_automate` allows you to use InSpec with Chef Automate.
 
-      You need to a user-token for communication with Chef Automate. More
-      information about token retrieval for Automate is available at:
-      https://docs.chef.io/api_delivery.html
+      You need to a token for communication. More information about token retrieval
+      is available at:
+        https://docs.chef.io/api_automate.html#authentication-methods
+        https://docs.chef.io/api_compliance.html#obtaining-an-api-token
     LONGDESC
-    option :dctoken, type: :string,
-      desc: 'Data Collector token'
-    option :usertoken, type: :string,
-      desc: 'Automate user token'
-    option :user, type: :string,
-      desc: 'Automate username'
-    option :ent, type: :string,
-      desc: 'Enterprise for Chef Automate reporting'
     option :insecure, aliases: :k, type: :boolean,
       desc: 'Explicitly allows InSpec to perform "insecure" SSL connections and transfers'
-    def login_automate(server) # rubocop:disable Metrics/AbcSize
+    option :user, type: :string, required: true,
+      desc: 'Username'
+    option :usertoken, type: :string, required: false,
+      desc: 'Access token (DEPRECATED: Please use `--token`)'
+    option :token, type: :string, required: false,
+      desc: 'Access token'
+    option :dctoken, type: :string, required: false,
+      desc: 'Data Collector token'
+    option :ent, type: :string, required: true,
+      desc: 'Enterprise for Chef Automate reporting'
+    def login_automate(server)
+      warn '[DEPRECATION] `inspec compliance login_automate` is deprecated. Please use `inspec compliance login`'
       options['server'] = server
-      url = options['server'] + '/compliance'
 
-      if url && !options['user'].nil? && !options['ent'].nil? && (!options['dctoken'].nil? || !options['usertoken'].nil?)
-        msg = login_automate_config(url, options['user'], options['dctoken'], options['usertoken'], options['ent'], options['insecure'])
-        puts '', msg
-        exit 0
-      end
+      options['token'] = options['usertoken'] if options['usertoken']
 
-      # parameters are missing if we reach here
-      puts 'Please specify an user using `--user \'USER\'`' if options['user'].nil?
-      puts 'Please specify an enterprise using `--ent \'cd\'`' if options['ent'].nil?
-      puts 'Please specify a token using `--usertoken=\'AUTOMATE_TOKEN\'`' if options['usertoken'].nil? && options['dctoken'].nil?
-      exit 1
+      Compliance::API.login(options)
     end
 
     desc 'profiles', 'list all available profiles in Chef Compliance'
-
+    option :owner, type: :string, required: false,
+      desc: 'owner whose profiles to list'
     def profiles
       config = Compliance::Configuration.new
       return if !loggedin(config)
 
+      # set owner to config
+      config['owner'] = options['owner'] || config['user']
+
       msg, profiles = Compliance::API.profiles(config)
       profiles.sort_by! { |hsh| hsh['title'] }
       if !profiles.empty?
         # iterate over profiles
         headline('Available profiles:')
         profiles.each { |profile|
-          li("#{profile['title']} #{mark_text(profile['owner_id'] + '/' + profile['name'])}")
+          li("#{profile['title']} v#{profile['version']} (#{mark_text(profile['owner_id'] + '/' + profile['name'])})")
         }
       else
         puts msg, 'Could not find any profiles'
         exit 1
       end
     rescue Compliance::ServerConfigurationMissing
-      puts "\nServer configuration information is missing. Please login using `inspec compliance login`"
+      STDERR.puts "\nServer configuration information is missing. Please login using `inspec compliance login`"
       exit 1
     end
 
@@ -159,11 +149,16 @@ module Compliance
 
     desc 'upload PATH', 'uploads a local profile to Chef Compliance'
     option :overwrite, type: :boolean, default: false,
-      desc: 'Overwrite existing profile on Chef Compliance.'
+      desc: 'Overwrite existing profile on Server.'
+    option :owner, type: :string, required: false,
+      desc: 'Owner that should own the profile'
     def upload(path) # rubocop:disable Metrics/MethodLength, Metrics/AbcSize, PerceivedComplexity, Metrics/CyclomaticComplexity
       config = Compliance::Configuration.new
       return if !loggedin(config)
 
+      # set owner to config
+      config['owner'] = options['owner'] || config['user']
+
       unless File.exist?(path)
         puts "Directory #{path} does not exist."
         exit 1
@@ -195,14 +190,12 @@ module Compliance
         error.call('Please login via `inspec compliance login`')
       end
 
-      # owner
-      owner = config['user']
       # read profile name from inspec.yml
       profile_name = profile.params[:name]
 
       # check that the profile is not uploaded already,
       # confirm upload to the user (overwrite with --force)
-      if Compliance::API.exist?(config, "#{owner}/#{profile_name}") && !options['overwrite']
+      if Compliance::API.exist?(config, "#{config['owner']}/#{profile_name}") && !options['overwrite']
         error.call('Profile exists on the server, use --overwrite')
       end
 
@@ -221,12 +214,12 @@ module Compliance
         archive_path = path
       end
 
-      puts "Start upload to #{owner}/#{profile_name}"
+      puts "Start upload to #{config['owner']}/#{profile_name}"
       pname = ERB::Util.url_encode(profile_name)
 
       Compliance::API.is_automate_server?(config) ? upload_msg = 'Uploading to Chef Automate' : upload_msg = 'Uploading to Chef Compliance'
       puts upload_msg
-      success, msg = Compliance::API.upload(config, owner, pname, archive_path)
+      success, msg = Compliance::API.upload(config, config['owner'], pname, archive_path)
 
       if success
         puts 'Successfully uploaded profile'
@@ -272,109 +265,9 @@ module Compliance
 
     private
 
-    def login_automate_config(url, user, dctoken, usertoken, ent, insecure) # rubocop:disable Metrics/ParameterLists
-      config = Compliance::Configuration.new
-      config.clean
-      config['user'] = user
-      config['server'] = url
-      config['automate'] = {}
-      config['automate']['ent'] = ent
-      config['server_type'] = 'automate'
-      config['insecure'] = insecure
-
-      # determine token method being used
-      if !dctoken.nil?
-        config['token'] = dctoken
-        token_type = 'dctoken'
-        token_msg = 'data collector token'
-      else
-        config['token'] = usertoken
-        token_type = 'usertoken'
-        token_msg = 'automate user token'
-      end
-      config['automate']['token_type'] = token_type
-      config['version'] = Compliance::API.version(config)
-      config.store
-      msg = "Stored configuration for Chef Automate: '#{url}' with user: '#{user}', ent: '#{ent}' and your #{token_msg}"
-      msg
-    end
-
-    def login_refreshtoken(url, options)
-      success, msg, _access_token = Compliance::API.get_token_via_refresh_token(url, options['refresh_token'], options['insecure'])
-      if success
-        config = Compliance::Configuration.new
-        config.clean
-        config['server'] = url
-        config['insecure'] = options['insecure']
-        config['server_type'] = 'compliance'
-        config['version'] = Compliance::API.version(config)
-        config.store
-      end
-
-      [success, msg]
-    end
-
-    def login_username_password(url, username, password, insecure)
-      config = Compliance::Configuration.new
-      config.clean
-      success, msg, api_token = Compliance::API.get_token_via_password(url, username, password, insecure)
-      if success
-        config['server'] = url
-        config['user'] = username
-        config['token'] = api_token
-        config['insecure'] = insecure
-        config['server_type'] = 'compliance'
-        config['version'] = Compliance::API.version(config)
-        config.store
-        success = true
-      end
-      [success, msg]
-    end
-
-    # saves a user access token (limited time)
-    def store_access_token(url, user, token, insecure)
-      config = Compliance::Configuration.new
-      config.clean
-      config['server'] = url
-      config['insecure'] = insecure
-      config['user'] = user
-      config['token'] = token
-      config['server_type'] = 'compliance'
-      config['version'] = Compliance::API.version(config)
-      config.store
-
-      [true, 'API access token stored']
-    end
-
-    # saves a refresh token supplied by the user
-    def store_refresh_token(url, refresh_token, verify, user, insecure)
-      config = Compliance::Configuration.new
-      config.clean
-      config['server'] = url
-      config['refresh_token'] = refresh_token
-      config['user'] = user
-      config['insecure'] = insecure
-      config['server_type'] = 'compliance'
-      config['version'] = Compliance::API.version(config)
-
-      if !verify
-        config.store
-        success = true
-        msg = 'API refresh token stored'
-      else
-        success, msg, _access_token= Compliance::API.get_token_via_refresh_token(url, refresh_token, insecure)
-        if success
-          config.store
-          msg = 'API access token verified'
-        end
-      end
-
-      [success, msg]
-    end
-
     def loggedin(config)
       serverknown = !config['server'].nil?
-      puts 'You need to login first with `inspec compliance login` or `inspec compliance login_automate`' if !serverknown
+      puts 'You need to login first with `inspec compliance login`' if !serverknown
       serverknown
     end
   end

data/lib/bundles/inspec-compliance/target.rb

@@ -32,7 +32,7 @@ module Compliance
         if config['token'].nil? && config['refresh_token'].nil?
           if config['server_type'] == 'automate'
             server = 'automate'
-            msg = 'inspec compliance login_automate https://your_automate_server --user USER --ent ENT --dctoken DCTOKEN or --usertoken USERTOKEN'
+            msg = 'inspec compliance login https://your_automate_server --user USER --ent ENT --dctoken DCTOKEN or --token USERTOKEN'
           else
             server = 'compliance'
             msg = "inspec compliance login https://your_compliance_server --user admin --insecure --token 'PASTE TOKEN HERE' "
@@ -90,8 +90,7 @@ EOF
 
       raise 'Unable to determine compliance profile name. This can be caused by ' \
         'an incorrect server in your configuration. Try to login to compliance ' \
-        'via the `inspec compliance login` or `inspec compliance login_automate` ' \
-        'commands.' if m.nil?
+        'via the `inspec compliance login` command.' if m.nil?
 
       "#{m[:owner]}/#{m[:id]}"
     end

data/lib/bundles/inspec-habitat/cli.rb

@@ -7,14 +7,19 @@ module Habitat
   class HabitatProfileCLI < Thor
     namespace 'habitat profile'
 
-    desc 'create PATH', 'Create a Habitat artifact for the profile found at PATH'
+    desc 'create PATH', 'Create a one-time Habitat artifact for the profile found at PATH'
     option :output_dir, type: :string, required: false,
       desc: 'Directory in which to save the generated Habitat artifact. Default: current directory'
     def create(path)
       Habitat::Profile.create(path, options)
     end
 
-    desc 'upload PATH', 'Create a Habitat artifact for the profile found at PATH, and upload it to a Habitat Depot'
+    desc 'setup PATH', 'Configure the profile at PATH for Habitat, including a plan and hooks'
+    def setup(path)
+      Habitat::Profile.setup(path)
+    end
+
+    desc 'upload PATH', 'Create a one-time Habitat artifact for the profile found at PATH, and upload it to a Habitat Depot'
     def upload(path)
       Habitat::Profile.upload(path, options)
     end

data/lib/bundles/inspec-habitat/profile.rb

@@ -3,7 +3,7 @@
 
 require 'inspec/profile_vendor'
 require 'mixlib/shellout'
-require 'toml'
+require 'tomlrb'
 
 module Habitat
   class Profile # rubocop:disable Metrics/ClassLength
@@ -17,6 +17,10 @@ module Habitat
       creator.delete_work_dir
     end
 
+    def self.setup(path)
+      new(path).setup
+    end
+
     def self.upload(path, options = {})
       uploader = new(path, options)
       uploader.upload
@@ -41,10 +45,11 @@ module Habitat
       verify_profile
       vendor_profile_dependencies
       copy_profile_to_work_dir
-      create_plan
-      create_run_hook
-      create_settings_file
-      create_default_config
+      create_habitat_directories(work_dir)
+      create_plan(work_dir)
+      create_run_hook(work_dir)
+      create_settings_file(work_dir)
+      create_default_config(work_dir)
 
       # returns the path to the .hart file in the work directory
       build_hart
@@ -80,6 +85,18 @@ module Habitat
       FileUtils.rm_rf(work_dir) if Dir.exist?(work_dir)
     end
 
+    def setup
+      Habitat::Log.info("Setting up profile at #{path} for Habitat...")
+      create_profile_object
+      verify_profile
+      vendor_profile_dependencies
+      create_habitat_directories(path)
+      create_plan(path)
+      create_run_hook(path)
+      create_settings_file(path)
+      create_default_config(path)
+    end
+
     private
 
     def create_profile_object
@@ -151,20 +168,26 @@ module Habitat
       return @work_dir if @work_dir
 
       @work_dir ||= Dir.mktmpdir('inspec-habitat-exporter')
-      Dir.mkdir(File.join(@work_dir, 'src'))
-      Dir.mkdir(File.join(@work_dir, 'habitat'))
-      Dir.mkdir(File.join(@work_dir, 'habitat', 'config'))
-      Dir.mkdir(File.join(@work_dir, 'habitat', 'hooks'))
       Habitat::Log.debug("Generated work directory #{@work_dir}")
 
       @work_dir
     end
 
+    def create_habitat_directories(parent_directory)
+      [
+        File.join(parent_directory, 'habitat'),
+        File.join(parent_directory, 'habitat', 'config'),
+        File.join(parent_directory, 'habitat', 'hooks'),
+      ].each do |dir|
+        Dir.mkdir(dir) unless Dir.exist?(dir)
+      end
+    end
+
     def copy_profile_to_work_dir
       Habitat::Log.info('Copying profile contents to the work directory...')
       profile.files.each do |f|
         src = File.join(profile.root_path, f)
-        dst = File.join(work_dir, 'src', f)
+        dst = File.join(work_dir, f)
         if File.directory?(f)
           Habitat::Log.debug("Creating directory #{dst}")
           FileUtils.mkdir_p(dst)
@@ -175,26 +198,26 @@ module Habitat
       end
     end
 
-    def create_plan
-      plan_file = File.join(work_dir, 'habitat', 'plan.sh')
+    def create_plan(directory)
+      plan_file = File.join(directory, 'habitat', 'plan.sh')
       Habitat::Log.info("Generating Habitat plan at #{plan_file}...")
       File.write(plan_file, plan_contents)
     end
 
-    def create_run_hook
-      run_hook_file = File.join(work_dir, 'habitat', 'hooks', 'run')
+    def create_run_hook(directory)
+      run_hook_file = File.join(directory, 'habitat', 'hooks', 'run')
       Habitat::Log.info("Generating a Habitat run hook at #{run_hook_file}...")
       File.write(run_hook_file, run_hook_contents)
     end
 
-    def create_settings_file
-      settings_file = File.join(work_dir, 'habitat', 'config', 'settings.sh')
+    def create_settings_file(directory)
+      settings_file = File.join(directory, 'habitat', 'config', 'settings.sh')
       Habitat::Log.info("Generating a settings file at #{settings_file}...")
       File.write(settings_file, "SLEEP_TIME={{cfg.sleep_time}}\n")
     end
 
-    def create_default_config
-      default_toml = File.join(work_dir, 'habitat', 'default.toml')
+    def create_default_config(directory)
+      default_toml = File.join(directory, 'habitat', 'default.toml')
       Habitat::Log.info("Generating Habitat's default.toml configuration...")
       File.write(default_toml, 'sleep_time = 300')
     end
@@ -275,7 +298,7 @@ module Habitat
       config_file = File.join(ENV['HOME'], '.hab', 'etc', 'cli.toml')
       return {} unless File.exist?(config_file)
 
-      @cli_config = TOML.load_file(config_file)
+      @cli_config = Tomlrb.load_file(config_file)
     end
 
     def output_dir
@@ -308,7 +331,7 @@ EOL
       plan += <<-EOL
 
 do_build() {
-  cp -vr $PLAN_CONTEXT/../src/* $HAB_CACHE_SRC_PATH/$pkg_dirname
+  cp -vr $PLAN_CONTEXT/../* $HAB_CACHE_SRC_PATH/$pkg_dirname
 }
 
 do_install() {
@@ -321,6 +344,7 @@ do_install() {
     profile_contents=(${profile_contents[@]/$item/})
   done
 
+  mkdir ${pkg_prefix}/dist
   cp -r ${profile_contents[@]} ${pkg_prefix}/dist/
 }
       EOL

data/lib/bundles/inspec-init/templates/profile/README.md

@@ -1,3 +1,3 @@
 # Example InSpec Profile
 
-This example shows the implementation of an InSpec [profile](../../docs/profiles.rst).
+This example shows the implementation of an InSpec profile.

data/lib/bundles/inspec-init/templates/profile/controls/example.rb

@@ -1,5 +1,5 @@
 # encoding: utf-8
-# copyright: 2015, The Authors
+# copyright: 2017, The Authors
 
 title 'sample section'
 

data/lib/bundles/inspec-supermarket/api.rb

@@ -8,7 +8,7 @@ require 'addressable/uri'
 
 module Supermarket
   class API
-    SUPERMARKET_URL = 'https://supermarket.chef.io'.freeze
+    SUPERMARKET_URL = 'https://supermarket.chef.io'
 
     # displays a list of profiles
     def self.profiles(supermarket_url = SUPERMARKET_URL)

data/lib/inspec/backend.rb

@@ -17,6 +17,14 @@ module Inspec
         Inspec::VERSION
       end
 
+      # Determine whether the connection/transport is a local connection
+      # Useful for resources to modify behavior as necessary, such as using
+      # the Ruby stdlib for a better experience.
+      def local_transport?
+        return false unless defined?(Train::Transports::Local)
+        backend.is_a?(Train::Transports::Local::Connection)
+      end
+
       # Ruby internal for printing a nice name for this class
       def to_s
         'Inspec::Backend::Class'

data/lib/inspec/cli.rb

@@ -186,7 +186,7 @@ class Inspec::InspecCLI < Inspec::BaseCLI # rubocop:disable Metrics/ClassLength
   option :command, aliases: :c,
     desc: 'A single command string to run instead of launching the shell'
   option :format, type: :string, default: nil, hide: true,
-    desc: 'Which formatter to use: cli, progress, documentation, json, json-min, junit'
+    desc: 'Which formatter to use: cli, documentation, html, json, json-min, junit, progress'
   def shell_func
     diagnose
     o = opts.dup

data/lib/inspec/control_eval_context.rb

@@ -35,7 +35,7 @@ module Inspec
     # @param profile_context [Inspec::ProfileContext]
     # @param outer_dsl [OuterDSLClass]
     # @return [ProfileContextClass]
-    def self.create(profile_context, resources_dsl) # rubocop:disable Metrics/AbcSize, Metrics/MethodLength
+    def self.create(profile_context, resources_dsl) # rubocop:disable Metrics/AbcSize, Metrics/MethodLength, Metrics/CyclomaticComplexity, Metrics/PerceivedComplexity
       rule_class = rule_context(resources_dsl)
       profile_context_owner = profile_context
       profile_id = profile_context.profile_id
@@ -45,12 +45,14 @@ module Inspec
         include Inspec::DSL::RequireOverride
         include resources_dsl
 
+        attr_accessor :skip_file
+
         def initialize(backend, conf, dependencies, require_loader)
           @backend = backend
           @conf = conf
           @dependencies = dependencies
           @require_loader = require_loader
-          @skip_profile = false
+          @skip_file = false
         end
 
         define_method :title do |arg|
@@ -113,7 +115,7 @@ module Inspec
         end
 
         define_method :register_control do |control, &block|
-          if @skip_profile || !profile_context_owner.profile_supports_os?
+          if @skip_file || !profile_context_owner.profile_supports_os?
             ::Inspec::Rule.set_skip_rule(control, true)
           end
 
@@ -129,9 +131,17 @@ module Inspec
           profile_context_owner.unregister_rule(id)
         end
 
-        def only_if
-          return unless block_given?
-          @skip_profile ||= !yield
+        define_method :only_if do |&block|
+          return unless block
+          return if @skip_file == true || block.yield == true
+
+          # Apply `set_skip_rule` for other rules in the same file
+          profile_context_owner.rules.values.each do |r|
+            sources_match = r.source_file == block.source_location[0]
+            Inspec::Rule.set_skip_rule(r, true) if sources_match
+          end
+
+          @skip_file = true
         end
 
         alias_method :rule, :control

data/lib/inspec/dependencies/requirement.rb

@@ -1,6 +1,7 @@
 # encoding: utf-8
 require 'inspec/cached_fetcher'
 require 'inspec/dependencies/dependency_set'
+require 'semverse'
 
 module Inspec
   #
@@ -10,7 +11,18 @@ module Inspec
   class Requirement
     def self.from_metadata(dep, cache, opts)
       raise 'Cannot load empty dependency.' if dep.nil? || dep.empty?
-      new(dep[:name], dep[:version], cache, opts[:cwd], opts.merge(dep))
+
+      req_path = opts[:cwd]
+
+      if dep[:path]
+        req_path = File.expand_path(dep[:path], req_path)
+      end
+
+      new(dep[:name],
+          dep[:version],
+          cache,
+          req_path,
+          opts.merge(dep))
     end
 
     def self.from_lock_entry(entry, cwd, cache, backend, opts = {})
@@ -28,10 +40,10 @@ module Inspec
       req
     end
 
-    attr_reader :cwd, :opts, :required_version
+    attr_reader :cwd, :opts, :version_constraints
     def initialize(name, version_constraints, cache, cwd, opts)
       @name = name
-      @required_version = Gem::Requirement.new(Array(version_constraints))
+      @version_constraints = Array(version_constraints)
       @cache = cache
       @backend = opts[:backend]
       @opts = opts
@@ -51,11 +63,13 @@ module Inspec
     end
 
     def source_satisfies_spec?
-      gem_dep.match?(profile.name, profile.version)
-    end
+      return true if version_constraints.empty?
 
-    def gem_dep
-      @gem_dep ||= Gem::Dependency.new(profile.name, required_version, :runtime)
+      # Semverse::Constraint.satisfy_all returns a list of versions that match all of the
+      # supplied constraints. Since we're only matching against a single version, the return
+      # of satisfy_all will be non-empty if the profile version we have satisfies the constraints.
+      constraints = @version_constraints.map { |x| Semverse::Constraint.new(x) }
+      !Semverse::Constraint.satisfy_all(constraints, Semverse::Version.new(profile.version)).empty?
     end
 
     def resolved_source
@@ -66,7 +80,7 @@ module Inspec
       h = {
         'name' => name,
         'resolved_source' => resolved_source,
-        'version_constraints' => required_version.to_s,
+        'version_constraints' => version_constraints.to_s,
       }
 
       if !dependencies.empty?