inspec 2.1.0 → 2.1.10

data/examples/profile-attribute/controls/example.rb

@@ -1,11 +1,11 @@
-# encoding: utf-8
-val_user = attribute('user', default: 'alice', description: 'An identification for the user')
-val_password = attribute('password', description: 'A value for the password')
-
-describe val_user do
-  it { should eq 'bob' }
-end
-
-describe val_password do
-  it { should eq 'secret' }
-end
+# encoding: utf-8
+val_user = attribute('user', default: 'alice', description: 'An identification for the user')
+val_password = attribute('password', description: 'A value for the password')
+
+describe val_user do
+  it { should eq 'bob' }
+end
+
+describe val_password do
+  it { should eq 'secret' }
+end

data/examples/profile-attribute/inspec.yml

@@ -1,8 +1,8 @@
-name: profile-attribute
-title: InSpec Profile
-maintainer: The Authors
-copyright: The Authors
-copyright_email: you@example.com
-license: Apache-2.0
-summary: An InSpec Compliance Profile
-version: 0.1.0
+name: profile-attribute
+title: InSpec Profile
+maintainer: The Authors
+copyright: The Authors
+copyright_email: you@example.com
+license: Apache-2.0
+summary: An InSpec Compliance Profile
+version: 0.1.0

data/examples/profile-aws/controls/iam_password_policy_expiration.rb

@@ -1,8 +1,8 @@
-control 'iam_password_policy_expiration' do
-  title 'Passwords must be set to expire'
-  impact 1.0
-
-  describe aws_iam_password_policy do
-    it { should expire_passwords }
-  end
-end
+control 'iam_password_policy_expiration' do
+  title 'Passwords must be set to expire'
+  impact 1.0
+
+  describe aws_iam_password_policy do
+    it { should expire_passwords }
+  end
+end

data/examples/profile-aws/controls/iam_password_policy_max_age.rb

@@ -1,8 +1,8 @@
-control 'iam_password_policy_max_age' do
-  title 'Passwords older than 90 days are not allowed'
-  impact 1.0
-
-  describe aws_iam_password_policy do
-    its('max_password_age_in_days') { should cmp <=90 }
-  end
-end
+control 'iam_password_policy_max_age' do
+  title 'Passwords older than 90 days are not allowed'
+  impact 1.0
+
+  describe aws_iam_password_policy do
+    its('max_password_age_in_days') { should cmp <=90 }
+  end
+end

data/examples/profile-aws/controls/iam_root_user_mfa.rb

@@ -1,8 +1,8 @@
-control 'iam_root_user_mfa' do
-  title 'MFA should be enabled for the root user'
-  impact 1.0
-
-  describe aws_iam_root_user do
-    it { should have_mfa_enabled }
-  end
-end
+control 'iam_root_user_mfa' do
+  title 'MFA should be enabled for the root user'
+  impact 1.0
+
+  describe aws_iam_root_user do
+    it { should have_mfa_enabled }
+  end
+end

data/examples/profile-aws/controls/iam_users_access_key_age.rb

@@ -1,8 +1,8 @@
-control 'iam_users_access_key_age' do
-  title 'No access keys may be older than 90 days'
-  impact 1.0
-
-  describe aws_iam_access_keys.where { created_days_ago > 90 } do
-    its('entries') { should be_empty }
-  end
-end
+control 'iam_users_access_key_age' do
+  title 'No access keys may be older than 90 days'
+  impact 1.0
+
+  describe aws_iam_access_keys.where { created_days_ago > 90 } do
+    its('entries') { should be_empty }
+  end
+end

data/examples/profile-aws/controls/iam_users_console_users_mfa.rb

@@ -1,8 +1,8 @@
-control 'iam_users_console_users_mfa' do
-  title 'Users with console access must have MFA enabled'
-  impact 1.0
-
-  describe aws_iam_users.where { has_console_password and not has_mfa_enabled } do
-    its('entries') { should be_empty }
-  end
-end
+control 'iam_users_console_users_mfa' do
+  title 'Users with console access must have MFA enabled'
+  impact 1.0
+
+  describe aws_iam_users.where { has_console_password and not has_mfa_enabled } do
+    its('entries') { should be_empty }
+  end
+end

data/examples/profile-aws/inspec.yml

@@ -1,11 +1,11 @@
-name: profile-aws
-title: AWS Example Profile
-maintainer: Chef Software, Inc.
-copyright: Chef Software, Inc.
-copyright_email: support@chef.io
-license: Apache-2.0
-summary: Demonstrates the use of an InSpec Compliance Profile on AWS
-version: 1.0.0
-
-supports:
-  - platform: aws
+name: profile-aws
+title: AWS Example Profile
+maintainer: Chef Software, Inc.
+copyright: Chef Software, Inc.
+copyright_email: support@chef.io
+license: Apache-2.0
+summary: Demonstrates the use of an InSpec Compliance Profile on AWS
+version: 1.0.0
+
+supports:
+  - platform: aws

data/examples/profile-azure/controls/azure_resource_group_example.rb

@@ -1,24 +1,24 @@
-control 'azure_resource_group_example' do
-  title 'Check if the Example Resource Group matches expectations'
-  impact 1.0
-
-  describe azure_resource_group(name: 'Inspec-Azure') do
-    # Check if the Resource Group is located in the correct region
-    its('location') { should cmp 'westeurope' }
-
-    # Check if the Resource Group has tags
-    it { should have_tags }
-
-    # Check if the number of VMs in the Resource Group is correct
-    its('vm_count') { should eq 3 }
-
-    # Check if the number of public IPs is correct
-    its('public_ip_count') { should eq 1 }
-
-    # Check if the number of Network Security Groups is correct
-    its('nsg_count') { should eq 1 }
-
-    # Check if the number of Storage Accounts is correct
-    its('sa_count') { should eq 1 }
-  end
-end
+control 'azure_resource_group_example' do
+  title 'Check if the Example Resource Group matches expectations'
+  impact 1.0
+
+  describe azure_resource_group(name: 'Inspec-Azure') do
+    # Check if the Resource Group is located in the correct region
+    its('location') { should cmp 'westeurope' }
+
+    # Check if the Resource Group has tags
+    it { should have_tags }
+
+    # Check if the number of VMs in the Resource Group is correct
+    its('vm_count') { should eq 3 }
+
+    # Check if the number of public IPs is correct
+    its('public_ip_count') { should eq 1 }
+
+    # Check if the number of Network Security Groups is correct
+    its('nsg_count') { should eq 1 }
+
+    # Check if the number of Storage Accounts is correct
+    its('sa_count') { should eq 1 }
+  end
+end

data/examples/profile-azure/controls/azure_vm_example.rb

@@ -1,29 +1,29 @@
-control 'azure_vm_example' do
-  title 'Check if the Example VM matches expectations'
-  impact 1.0
-
-  describe azure_generic_resource(group_name: 'Inspec-Azure', name: 'Windows-Example-VM') do
-    # Check if the VM is located in the correct region
-    its('location') { should cmp 'westeurope' }
-
-    # Check if the VM has tags
-    it { should_not have_tags }
-
-    # Check if the VM has the correct image
-    its('properties.storageProfile.imageReference.publisher') { should cmp 'MicrosoftWindowsServer' }
-    its('properties.storageProfile.imageReference.offer') { should cmp 'WindowsServer' }
-    its('properties.storageProfile.imageReference.sku') { should cmp '2016-Datacenter' }
-
-    # Check if the VM has the correct size
-    its('properties.hardwareProfile.vmSize') { should cmp 'Standard_DS2_v2' }
-
-    # Check if the VM has the correct computer name
-    its('properties.osProfile.computerName') { should eq 'SomethingObscure' }
-
-    # Check if the VM has the correct admin username
-    its('properties.osProfile.adminUsername') { should eq 'SomethingSecure' }
-
-    # Check if the VM has automatic updates enabled
-    its('properties.osProfile.windowsConfiguration.enableAutomaticUpdates') { should be true }
-  end
-end
+control 'azure_vm_example' do
+  title 'Check if the Example VM matches expectations'
+  impact 1.0
+
+  describe azure_generic_resource(group_name: 'Inspec-Azure', name: 'Windows-Example-VM') do
+    # Check if the VM is located in the correct region
+    its('location') { should cmp 'westeurope' }
+
+    # Check if the VM has tags
+    it { should_not have_tags }
+
+    # Check if the VM has the correct image
+    its('properties.storageProfile.imageReference.publisher') { should cmp 'MicrosoftWindowsServer' }
+    its('properties.storageProfile.imageReference.offer') { should cmp 'WindowsServer' }
+    its('properties.storageProfile.imageReference.sku') { should cmp '2016-Datacenter' }
+
+    # Check if the VM has the correct size
+    its('properties.hardwareProfile.vmSize') { should cmp 'Standard_DS2_v2' }
+
+    # Check if the VM has the correct computer name
+    its('properties.osProfile.computerName') { should eq 'SomethingObscure' }
+
+    # Check if the VM has the correct admin username
+    its('properties.osProfile.adminUsername') { should eq 'SomethingSecure' }
+
+    # Check if the VM has automatic updates enabled
+    its('properties.osProfile.windowsConfiguration.enableAutomaticUpdates') { should be true }
+  end
+end

data/examples/profile-azure/inspec.yml

@@ -1,11 +1,11 @@
-name: profile-azure
-title: Azure Example Profile
-maintainer: Chef Software, Inc.
-copyright: Chef Software, Inc.
-copyright_email: support@chef.io
-license: Apache-2.0
-summary: Demonstrates the use of an InSpec Compliance Profile on Azure
-version: 1.0.0
-
-supports:
-  - platform: azure
+name: profile-azure
+title: Azure Example Profile
+maintainer: Chef Software, Inc.
+copyright: Chef Software, Inc.
+copyright_email: support@chef.io
+license: Apache-2.0
+summary: Demonstrates the use of an InSpec Compliance Profile on Azure
+version: 1.0.0
+
+supports:
+  - platform: azure

data/examples/profile-sensitive/README.md

@@ -1,29 +1,29 @@
-# Example InSpec Profile with Sensitive failures
-
-This profile demostrates resources flagged as sensitive
-
-## Usage
-
-```
-$ inspec exec examples/profile-sensitive
-....
-
-  bob should
-   ∅  eq "billy"
-
-   expected: "billy"
-        got: "bob"
-
-   (compared using ==)
-
-  sensitivepassword should
-     ∅  eq "secret"
-     *** sensitive output suppressed ***
-  bob should
-     ✔  eq "bob"
-  sensitivepassword should
-     ✔  eq "sensitivepassword"
-
-Test Summary: 2 successful, 2 failures, 0 skipped
-
-```
+# Example InSpec Profile with Sensitive failures
+
+This profile demonstrates resources flagged as sensitive
+
+## Usage
+
+```
+$ inspec exec examples/profile-sensitive
+....
+
+  bob should
+   ∅  eq "billy"
+
+   expected: "billy"
+        got: "bob"
+
+   (compared using ==)
+
+  sensitivepassword should
+     ∅  eq "secret"
+     *** sensitive output suppressed ***
+  bob should
+     ✔  eq "bob"
+  sensitivepassword should
+     ✔  eq "sensitivepassword"
+
+Test Summary: 2 successful, 2 failures, 0 skipped
+
+```

data/examples/profile-sensitive/controls/sensitive-failures.rb

@@ -1,9 +1,9 @@
-# encoding: utf-8
-
-describe 'bob' do
-  it { should eq 'billy' }
-end
-
-describe 'sensitivepassword', :sensitive do
-  it { should eq 'secret' }
-end
+# encoding: utf-8
+
+describe 'bob' do
+  it { should eq 'billy' }
+end
+
+describe 'sensitivepassword', :sensitive do
+  it { should eq 'secret' }
+end

data/examples/profile-sensitive/controls/sensitive.rb

@@ -1,9 +1,9 @@
-# encoding: utf-8
-
-describe 'bob' do
-  it { should eq 'bob' }
-end
-
-describe 'sensitivepassword', :sensitive do
-  it { should eq 'sensitivepassword' }
-end
+# encoding: utf-8
+
+describe 'bob' do
+  it { should eq 'bob' }
+end
+
+describe 'sensitivepassword', :sensitive do
+  it { should eq 'sensitivepassword' }
+end

data/examples/profile-sensitive/inspec.yml

@@ -1,8 +1,8 @@
-name: profile-sensitive
-title: InSpec Sensitive Profile
-maintainer: The Authors
-copyright: The Authors
-copyright_email: you@example.com
-license: Apache-2.0
-summary: An InSpec Compliance Profile
-version: 0.1.0
+name: profile-sensitive
+title: InSpec Sensitive Profile
+maintainer: The Authors
+copyright: The Authors
+copyright_email: you@example.com
+license: Apache-2.0
+summary: An InSpec Compliance Profile
+version: 0.1.0

data/examples/profile/README.md

@@ -1,48 +1,48 @@
-# Example InSpec Profile
-
-This example shows the implementation of an InSpec [profile](../../docs/profiles.md).
-
-## Verify a profile
-
-InSpec ships with built-in features to verify a profile structure.
-
-```bash
-$ inspec check examples/profile
-Summary
--------
-Location: examples/profile
-Profile: profile
-Controls: 4
-Timestamp: 2016-03-24T16:20:21+00:00
-Valid: true
-
-Errors
-------
-
-Warnings
---------
-```
-
-## Execute a profile
-
-To run all **supported** controls on a local machine use `inspec exec /path/to/profile`.
-
-```bash
-$ inspec exec examples/profile
-..
-
-Finished in 0.0025 seconds (files took 0.12449 seconds to load)
-8 examples, 0 failures
-```
-
-## Execute a specific control from a profile
-
-To run one control from the profile use `inspec exec /path/to/profile --controls name`.
-
-```bash
-$ inspec exec examples/profile --controls tmp-1.0
-.
-
-Finished in 0.0025 seconds (files took 0.12449 seconds to load)
-1 examples, 0 failures
-```
+# Example InSpec Profile
+
+This example shows the implementation of an InSpec [profile](../../docs/profiles.md).
+
+## Verify a profile
+
+InSpec ships with built-in features to verify a profile structure.
+
+```bash
+$ inspec check examples/profile
+Summary
+-------
+Location: examples/profile
+Profile: profile
+Controls: 4
+Timestamp: 2016-03-24T16:20:21+00:00
+Valid: true
+
+Errors
+------
+
+Warnings
+--------
+```
+
+## Execute a profile
+
+To run all **supported** controls on a local machine use `inspec exec /path/to/profile`.
+
+```bash
+$ inspec exec examples/profile
+..
+
+Finished in 0.0025 seconds (files took 0.12449 seconds to load)
+8 examples, 0 failures
+```
+
+## Execute a specific control from a profile
+
+To run one control from the profile use `inspec exec /path/to/profile --controls name`.
+
+```bash
+$ inspec exec examples/profile --controls tmp-1.0
+.
+
+Finished in 0.0025 seconds (files took 0.12449 seconds to load)
+1 examples, 0 failures
+```