inspec 2.1.0 → 2.1.10

data/examples/kitchen-puppet/Puppetfile

@@ -1,25 +1,25 @@
-#!/usr/bin/env ruby
-#^syntax detection
-
-forge "https://forgeapi.puppetlabs.com"
-
-# use dependencies defined in metadata.json
-metadata
-
-# use dependencies defined in Modulefile
-# modulefile
-
-# A module from the Puppet Forge
-# mod 'puppetlabs-stdlib'
-
-# A module from git
-# mod 'puppetlabs-ntp',
-#   :git => 'git://github.com/puppetlabs/puppetlabs-ntp.git'
-
-# A module from a git branch/tag
-# mod 'puppetlabs-apt',
-#   :git => 'https://github.com/puppetlabs/puppetlabs-apt.git',
-#   :ref => '1.4.x'
-
-# A module from Github pre-packaged tarball
-# mod 'puppetlabs-apache', '0.6.0', :github_tarball => 'puppetlabs/puppetlabs-apache'
+#!/usr/bin/env ruby
+#^syntax detection
+
+forge "https://forgeapi.puppetlabs.com"
+
+# use dependencies defined in metadata.json
+metadata
+
+# use dependencies defined in Modulefile
+# modulefile
+
+# A module from the Puppet Forge
+# mod 'puppetlabs-stdlib'
+
+# A module from git
+# mod 'puppetlabs-ntp',
+#   :git => 'git://github.com/puppetlabs/puppetlabs-ntp.git'
+
+# A module from a git branch/tag
+# mod 'puppetlabs-apt',
+#   :git => 'https://github.com/puppetlabs/puppetlabs-apt.git',
+#   :ref => '1.4.x'
+
+# A module from Github pre-packaged tarball
+# mod 'puppetlabs-apache', '0.6.0', :github_tarball => 'puppetlabs/puppetlabs-apache'

data/examples/kitchen-puppet/README.md

@@ -1,53 +1,53 @@
-# Test-Kitchen - InSpec with Puppet Example
-
-This example demonstrates a complete roundtrip via [Test-Kitchen](http://kitchen.ci/).
-
-```bash
-# install all dependencies
-$ bundle install
-# show all available tests
-$ bundle exec kitchen list
-Instance             Driver   Provisioner  Verifier  Transport  Last Action
-default-centos-71    Vagrant  PuppetApply  Inspec    Ssh        <Not Created>
-default-ubuntu-1204  Vagrant  PuppetApply  Inspec    Ssh        <Not Created>
-default-ubuntu-1404  Vagrant  PuppetApply  Inspec    Ssh        <Not Created>
-
-# Now we are ready to run a complete test
-$ bundle exec kitchen test default-ubuntu-1404
------> Starting Kitchen (v1.4.2)
------> Cleaning up any prior instances of <default-ubuntu-1404>
------> Destroying <default-ubuntu-1404>...
-       Finished destroying <default-ubuntu-1404> (0m0.00s).
------> Testing <default-ubuntu-1404>
------> Creating <default-ubuntu-1404>...
-       Bringing machine 'default' up with 'virtualbox' provider...
-       ==> default: Importing base box 'opscode-ubuntu-14.04'...
-
-...
-
-       Vagrant instance <default-ubuntu-1404> created.
-       Finished creating <default-ubuntu-1404> (0m33.62s).
------> Converging <default-ubuntu-1404>...
-       Preparing files for transfer
-
-...
-
-       Finished converging <default-ubuntu-1404> (0m48.95s).
------> Setting up <default-ubuntu-1404>...
-       Finished setting up <default-ubuntu-1404> (0m0.00s).
------> Verifying <default-ubuntu-1404>...
-.....
-
-Finished in 0.08278 seconds (files took 1 minute 22.81 seconds to load)
-5 examples, 0 failures
-
-       Finished verifying <default-ubuntu-1404> (0m0.22s).
------> Destroying <default-ubuntu-1404>...
-       ==> default: Forcing shutdown of VM...
-       ==> default: Destroying VM and associated drives...
-       Vagrant instance <default-ubuntu-1404> destroyed.
-       Finished destroying <default-ubuntu-1404> (0m3.97s).
-       Finished testing <default-ubuntu-1404> (1m26.79s).
------> Kitchen is finished. (1m27.34s)
-
-```
+# Test-Kitchen - InSpec with Puppet Example
+
+This example demonstrates a complete roundtrip via [Test-Kitchen](http://kitchen.ci/).
+
+```bash
+# install all dependencies
+$ bundle install
+# show all available tests
+$ bundle exec kitchen list
+Instance             Driver   Provisioner  Verifier  Transport  Last Action
+default-centos-71    Vagrant  PuppetApply  Inspec    Ssh        <Not Created>
+default-ubuntu-1204  Vagrant  PuppetApply  Inspec    Ssh        <Not Created>
+default-ubuntu-1404  Vagrant  PuppetApply  Inspec    Ssh        <Not Created>
+
+# Now we are ready to run a complete test
+$ bundle exec kitchen test default-ubuntu-1404
+-----> Starting Kitchen (v1.4.2)
+-----> Cleaning up any prior instances of <default-ubuntu-1404>
+-----> Destroying <default-ubuntu-1404>...
+       Finished destroying <default-ubuntu-1404> (0m0.00s).
+-----> Testing <default-ubuntu-1404>
+-----> Creating <default-ubuntu-1404>...
+       Bringing machine 'default' up with 'virtualbox' provider...
+       ==> default: Importing base box 'opscode-ubuntu-14.04'...
+
+...
+
+       Vagrant instance <default-ubuntu-1404> created.
+       Finished creating <default-ubuntu-1404> (0m33.62s).
+-----> Converging <default-ubuntu-1404>...
+       Preparing files for transfer
+
+...
+
+       Finished converging <default-ubuntu-1404> (0m48.95s).
+-----> Setting up <default-ubuntu-1404>...
+       Finished setting up <default-ubuntu-1404> (0m0.00s).
+-----> Verifying <default-ubuntu-1404>...
+.....
+
+Finished in 0.08278 seconds (files took 1 minute 22.81 seconds to load)
+5 examples, 0 failures
+
+       Finished verifying <default-ubuntu-1404> (0m0.22s).
+-----> Destroying <default-ubuntu-1404>...
+       ==> default: Forcing shutdown of VM...
+       ==> default: Destroying VM and associated drives...
+       Vagrant instance <default-ubuntu-1404> destroyed.
+       Finished destroying <default-ubuntu-1404> (0m3.97s).
+       Finished testing <default-ubuntu-1404> (1m26.79s).
+-----> Kitchen is finished. (1m27.34s)
+
+```

data/examples/kitchen-puppet/manifests/site.pp

@@ -1,33 +1,33 @@
-# == Class prepare::site
-#
-
-# Install nginx from package repos
-case $osfamily {
-  'RedHat': {
-    yumrepo { 'nginx':
-      descr => 'Nginx Repo',
-      baseurl => 'http://nginx.org/packages/centos/7/x86_64',
-      gpgkey => 'http://nginx.org/keys/nginx_signing.key',
-      enabled => 1
-    }
-
-    package { 'nginx':
-      require => [Yumrepo[nginx]],
-      ensure => 'latest'
-    }
-  }
-  'Debian': {
-    package { 'nginx':
-      ensure => 'latest'
-    }
-  }
-  default: {
-    fail("Unsupported platform: ${osfamily}/${operatingsystem}")
-  }
-}
-
-# Start the service
-service { 'nginx':
-  enable => 'true',
-  ensure => 'running'
-}
+# == Class prepare::site
+#
+
+# Install nginx from package repos
+case $osfamily {
+  'RedHat': {
+    yumrepo { 'nginx':
+      descr => 'Nginx Repo',
+      baseurl => 'http://nginx.org/packages/centos/7/x86_64',
+      gpgkey => 'http://nginx.org/keys/nginx_signing.key',
+      enabled => 1
+    }
+
+    package { 'nginx':
+      require => [Yumrepo[nginx]],
+      ensure => 'latest'
+    }
+  }
+  'Debian': {
+    package { 'nginx':
+      ensure => 'latest'
+    }
+  }
+  default: {
+    fail("Unsupported platform: ${osfamily}/${operatingsystem}")
+  }
+}
+
+# Start the service
+service { 'nginx':
+  enable => 'true',
+  ensure => 'running'
+}

data/examples/kitchen-puppet/metadata.json

@@ -1,11 +1,11 @@
-{
-  "name": "prepare",
-  "version": "0.1.0",
-  "author": "support@chef.io",
-  "summary": "This module prepares the test operating systems",
-  "license": "Apache-2.0",
-  "source": "https://github.com/chef/inspec/examples/kitchen-puppet",
-  "project_page": "https://github.com/chef/inspec/examples/kitchen-puppet",
-  "issues_url": "https://github.com/chef/inspec/issues",
-  "dependencies": []
-}
+{
+  "name": "prepare",
+  "version": "0.1.0",
+  "author": "support@chef.io",
+  "summary": "This module prepares the test operating systems",
+  "license": "Apache-2.0",
+  "source": "https://github.com/chef/inspec/examples/kitchen-puppet",
+  "project_page": "https://github.com/chef/inspec/examples/kitchen-puppet",
+  "issues_url": "https://github.com/chef/inspec/issues",
+  "dependencies": []
+}

data/examples/kitchen-puppet/test/integration/default/web_spec.rb

@@ -1,28 +1,28 @@
-# encoding: utf-8
-# author: Christoph Hartmann
-# author: Dominik Richter
-
-# use basic tests
-describe package('nginx') do
-  it { should be_installed }
-end
-
-# extend tests with metadata
-control '01' do
-  impact 0.7
-  title 'Verify nginx service'
-  desc 'Ensures nginx service is up and running'
-  describe service('nginx') do
-    it { should be_enabled }
-    it { should be_installed }
-    it { should be_running }
-  end
-end
-
-# implement os dependent tests
-web_user = 'www-data'
-web_user = 'nginx' if os[:family] == 'centos'
-
-describe user(web_user) do
-  it { should exist }
-end
+# encoding: utf-8
+# author: Christoph Hartmann
+# author: Dominik Richter
+
+# use basic tests
+describe package('nginx') do
+  it { should be_installed }
+end
+
+# extend tests with metadata
+control '01' do
+  impact 0.7
+  title 'Verify nginx service'
+  desc 'Ensures nginx service is up and running'
+  describe service('nginx') do
+    it { should be_enabled }
+    it { should be_installed }
+    it { should be_running }
+  end
+end
+
+# implement os dependent tests
+web_user = 'www-data'
+web_user = 'nginx' if os[:family] == 'centos'
+
+describe user(web_user) do
+  it { should exist }
+end

data/examples/meta-profile/README.md

@@ -1,37 +1,37 @@
-# meta-profile
-
-The inspec.yml file in this profile shows how one can use dependencies
-from non-local sources such as Git or an HTTP url. This feature can
-be used to build up a environment-wide profile that is based on more
-specific profiles managed by others.
-
-InSpec supports multiple profile locations:
-
-```
-depends:
-  # defaults to supermarket
-  - name: hardening/ssh-hardening  
-  # remote tar or zip file
-  - name: os-hardening
-    url: https://github.com/dev-sec/tests-os-hardening/archive/master.zip
-  # git
-  - git: https://github.com/dev-sec/ssl-baseline.git
-  - name: windows-patch-benchmark
-    git: https://github.com/chris-rock/windows-patch-benchmark.git
-  # Chef Compliance
-  - name: linux
-    compliance: base/linux
-```
-
-You could use those dependencies in your `example.rb`:
-
-```
-
-include_controls 'hardening/ssh-hardening'
-include_controls 'os-hardening'
-include_controls 'ssl-baseline'
-include_controls 'linux'
-include_controls 'windows-patch-benchmark'
-```
-
-Further details are described in our [InSpec Docs](https://www.inspec.io/docs/reference/profiles/)
+# meta-profile
+
+The inspec.yml file in this profile shows how one can use dependencies
+from non-local sources such as Git or an HTTP url. This feature can
+be used to build up a environment-wide profile that is based on more
+specific profiles managed by others.
+
+InSpec supports multiple profile locations:
+
+```
+depends:
+  # defaults to supermarket
+  - name: hardening/ssh-hardening  
+  # remote tar or zip file
+  - name: os-hardening
+    url: https://github.com/dev-sec/tests-os-hardening/archive/master.zip
+  # git
+  - git: https://github.com/dev-sec/ssl-baseline.git
+  - name: windows-patch-benchmark
+    git: https://github.com/chris-rock/windows-patch-benchmark.git
+  # Chef Compliance
+  - name: linux
+    compliance: base/linux
+```
+
+You could use those dependencies in your `example.rb`:
+
+```
+
+include_controls 'hardening/ssh-hardening'
+include_controls 'os-hardening'
+include_controls 'ssl-baseline'
+include_controls 'linux'
+include_controls 'windows-patch-benchmark'
+```
+
+Further details are described in our [InSpec Docs](https://www.inspec.io/docs/reference/profiles/)

data/examples/meta-profile/controls/example.rb

@@ -1,13 +1,13 @@
-# encoding: utf-8
-# copyright: 2015, The Authors
-
-# import full profile
-include_controls 'dev-sec/ssh-baseline'
-
-# select only individual controls
-include_controls 'ssl-baseline' do
-  control "tls1.2"
-end
-
-# inspec knows that it cannot run Windows tests on Linux
-include_controls 'windows-patch-benchmark'
+# encoding: utf-8
+# copyright: 2015, The Authors
+
+# import full profile
+include_controls 'dev-sec/ssh-baseline'
+
+# select only individual controls
+include_controls 'ssl-baseline' do
+  control "tls1.2"
+end
+
+# inspec knows that it cannot run Windows tests on Linux
+include_controls 'windows-patch-benchmark'

data/examples/meta-profile/inspec.yml

@@ -1,13 +1,13 @@
-name: meta-profile
-title: Meta Compliance Profile
-maintainer: InSpec Authors
-copyright: InSpec Authors
-copyright_email: support@chef.io
-license: Apache-2.0
-summary: InSpec Profile that is only consuming dependencies
-version: 0.2.0
-depends:
-  - name: dev-sec/ssh-baseline  # defaults to supermarket
-  - url: https://github.com/dev-sec/ssl-baseline
-  - name: windows-patch-benchmark
-    url: https://github.com/chris-rock/windows-patch-benchmark
+name: meta-profile
+title: Meta Compliance Profile
+maintainer: InSpec Authors
+copyright: InSpec Authors
+copyright_email: support@chef.io
+license: Apache-2.0
+summary: InSpec Profile that is only consuming dependencies
+version: 0.2.0
+depends:
+  - name: dev-sec/ssh-baseline  # defaults to supermarket
+  - url: https://github.com/dev-sec/ssl-baseline
+  - name: windows-patch-benchmark
+    url: https://github.com/chris-rock/windows-patch-benchmark

data/examples/profile-attribute.yml

@@ -1,2 +1,2 @@
-user: bob
-password: secret
+user: bob
+password: secret

data/examples/profile-attribute/README.md

@@ -1,14 +1,14 @@
-# Example InSpec Profile with Attributes
-
-This profile uses InSpec attributes to parameterize a profile.
-
-## Usage
-
-```
-$ inspec exec examples/profile-attribute --attrs examples/profile-attribute.yml
-....
-
-Finished in 0.00178 seconds (files took 0.48529 seconds to load)
-4 examples, 0 failures
-
-```
+# Example InSpec Profile with Attributes
+
+This profile uses InSpec attributes to parameterize a profile.
+
+## Usage
+
+```
+$ inspec exec examples/profile-attribute --attrs examples/profile-attribute.yml
+....
+
+Finished in 0.00178 seconds (files took 0.48529 seconds to load)
+4 examples, 0 failures
+
+```