inspec 4.18.51 → 4.18.85

data/lib/inspec/reporters/json_automate.rb

@@ -1,80 +0,0 @@
-require "json"
-
-module Inspec::Reporters
-  class JsonAutomate < Json
-    def initialize(config)
-      super(config)
-      @profiles = []
-    end
-
-    def render
-      output(report.to_json, false)
-    end
-
-    def report
-      # grab profiles from the json parent class
-      @profiles = profiles
-
-      output = {
-        platform: platform,
-        profiles: merge_profiles,
-        statistics: {
-          duration: run_data[:statistics][:duration],
-        },
-        version: run_data[:version],
-      }
-
-      # optional json-config passthrough options
-      %w{node_name environment roles job_uuid passthrough}.each do |option|
-        output[option.to_sym] = @config[option] unless @config[option].nil?
-      end
-      output
-    end
-
-    private
-
-    def merge_profiles
-      @profiles.each do |profile|
-        next unless profile.key?(:parent_profile)
-
-        parent_profile = find_master_parent(profile)
-        merge_controls(parent_profile, profile)
-        merge_depends(parent_profile, profile)
-      end
-
-      # delete child profiles
-      @profiles.delete_if { |p| p.key?(:parent_profile) }
-
-      @profiles
-    end
-
-    def find_master_parent(profile)
-      return profile unless profile.key?(:parent_profile)
-
-      parent_profile = @profiles.select { |parent| parent[:name] == profile[:parent_profile] }.first
-      find_master_parent(parent_profile)
-    end
-
-    def merge_controls(parent, child)
-      parent[:controls].each do |control|
-        child_control = child[:controls].select { |c| c[:id] == control[:id] }.first
-        next if child_control.nil?
-
-        control.each do |name, _value|
-          child_value = child_control[name]
-          next if child_value.nil? || (child_value.respond_to?(:empty?) && child_value.empty?)
-
-          control[name] = child_value
-        end
-      end
-    end
-
-    def merge_depends(parent, child)
-      return unless child.key?(:depends)
-
-      child[:depends].each do |d|
-        parent[:depends] << d
-      end
-    end
-  end
-end

data/lib/inspec/reporters/json_min.rb

@@ -1,48 +0,0 @@
-require "json"
-
-module Inspec::Reporters
-  class JsonMin < Base
-    def render
-      output(report.to_json, false)
-    end
-
-    def report # rubocop:disable Metrics/AbcSize
-      report = {
-        controls: [],
-        statistics: { duration: run_data[:statistics][:duration] },
-        version: run_data[:version],
-      }
-
-      # collect all test results and add them to the report
-      run_data[:profiles].each do |profile|
-        profile_id = profile[:name]
-        next unless profile[:controls]
-
-        profile[:controls].each do |control|
-          control_id = control[:id]
-          next unless control[:results]
-
-          control[:results].each do |result|
-            result_for_report = {
-              id: control_id,
-              profile_id: profile_id,
-              profile_sha256: profile[:sha256],
-              status: result[:status],
-              code_desc: result[:code_desc],
-            }
-
-            result_for_report[:skip_message] = result[:skip_message] if result.key?(:skip_message)
-            result_for_report[:resource] = result[:resource] if result.key?(:resource)
-            result_for_report[:message] = result[:message] if result.key?(:message)
-            result_for_report[:exception] = result[:exception] if result.key?(:exception)
-            result_for_report[:backtrace] = result[:backtrace] if result.key?(:backtrace)
-
-            report[:controls] << result_for_report
-          end
-        end
-      end
-
-      report
-    end
-  end
-end

data/lib/inspec/reporters/junit.rb

@@ -1,77 +0,0 @@
-module Inspec::Reporters
-  class Junit < Base
-    def render
-      require "rexml/document"
-      xml_output = REXML::Document.new
-      xml_output.add(REXML::XMLDecl.new)
-
-      testsuites = REXML::Element.new("testsuites")
-      xml_output.add(testsuites)
-
-      run_data[:profiles].each do |profile|
-        testsuites.add(build_profile_xml(profile))
-      end
-
-      formatter = REXML::Formatters::Pretty.new
-      formatter.compact = true
-      output(formatter.write(xml_output.xml_decl, ""))
-      output(formatter.write(xml_output.root, ""))
-    end
-
-    private
-
-    def build_profile_xml(profile)
-      profile_xml = REXML::Element.new("testsuite")
-      profile_xml.add_attribute("name", profile[:name])
-      profile_xml.add_attribute("tests", count_profile_tests(profile))
-      profile_xml.add_attribute("failed", count_profile_failed_tests(profile))
-      profile_xml.add_attribute("failures", count_profile_failed_tests(profile))
-
-      profile[:controls].each do |control|
-        next if control[:results].nil?
-
-        control[:results].each do |result|
-          profile_xml.add(build_result_xml(profile[:name], control, result))
-        end
-      end
-
-      profile_xml
-    end
-
-    def build_result_xml(profile_name, control, result)
-      result_xml = REXML::Element.new("testcase")
-      result_xml.add_attribute("name", result[:code_desc])
-      result_xml.add_attribute("classname", control[:title].nil? ? "#{profile_name}.Anonymous" : "#{profile_name}.#{control[:id]}")
-      result_xml.add_attribute("target", run_data[:platform][:target].nil? ? "" : run_data[:platform][:target].to_s)
-      result_xml.add_attribute("time", result[:run_time])
-
-      if result[:status] == "failed"
-        failure_element = REXML::Element.new("failure")
-        failure_element.add_attribute("message", result[:message])
-        result_xml.add(failure_element)
-      elsif result[:status] == "skipped"
-        result_xml.add_element("skipped")
-      end
-
-      result_xml
-    end
-
-    def count_profile_tests(profile)
-      profile[:controls].reduce(0) do |acc, elem|
-        acc + (elem[:results].nil? ? 0 : elem[:results].count)
-      end
-    end
-
-    def count_profile_failed_tests(profile)
-      profile[:controls].reduce(0) do |acc, elem|
-        if elem[:results].nil?
-          acc
-        else
-          acc + elem[:results].reduce(0) do |fail_test_total, test_case|
-            test_case[:status] == "failed" ? fail_test_total + 1 : fail_test_total
-          end
-        end
-      end
-    end
-  end
-end

data/lib/inspec/reporters/yaml.rb

@@ -1,20 +0,0 @@
-require "yaml"
-
-module Inspec::Reporters
-  class Yaml < Base
-    def render
-      output(Inspec::Reporters::Json.new({ run_data: run_data }).report.to_yaml, false)
-    end
-
-    def report
-      {
-        platform: platform,
-        profiles: profiles,
-        statistics: {
-          duration: run_data[:statistics][:duration],
-        },
-        version: run_data[:version],
-      }
-    end
-  end
-end

data/lib/inspec/require_loader.rb

@@ -1,29 +0,0 @@
-module Inspec
-  class RequireLoader
-    Item = Struct.new(:content, :ref, :line, :loaded)
-
-    def initialize
-      @contents = {}
-    end
-
-    def add(path, content, ref, line)
-      @contents[path] = Item.new(content, ref, line, false)
-    end
-
-    def load(path)
-      c = @contents[path]
-      c.loaded = true
-      res = [c.content, c.ref, c.line || 1]
-      yield res if block_given?
-      res
-    end
-
-    def exists?(path)
-      @contents.key?(path)
-    end
-
-    def loaded?(path)
-      @contents[path].loaded == true
-    end
-  end
-end

data/lib/inspec/resource.rb

@@ -1,114 +0,0 @@
-# copyright: 2015, Vulcano Security GmbH
-require "inspec/plugin/v1"
-require "inspec/utils/deprecation/global_method" # for resources
-
-module Inspec
-  class ProfileNotFound < StandardError; end
-
-  class Resource
-    def self.default_registry
-      @default_registry ||= {}
-    end
-
-    # TODO: these are keyed off of strings
-    def self.registry
-      @registry ||= default_registry
-    end
-
-    # TODO: these are keyed off of symbols
-    def self.supports
-      @supports ||= {}
-    end
-
-    def self.new_registry
-      default_registry.dup
-    end
-
-    def self.backfill_supports!
-      reg = registry.keys.map(&:to_sym).sort
-      sup = supports.keys.map(&:to_sym).sort
-
-      missings = reg - sup
-
-      supports[:platform] = [{ platform: "os" }] # patch the circular dep
-
-      missings.each do |missing|
-        klass = registry[missing.to_s].superclass
-        sklas = klass.superclass.name&.to_sym # might be resource = no name
-
-        klass = klass.name.to_sym
-
-        case
-        when klass != missing # an alias
-          supports[missing] = supports[klass]
-        when sklas
-          supports[klass]   = supports[sklas]
-        end
-      end
-    end
-
-    # Creates the inner DSL which includes all resources for
-    # creating tests. It is always connected to one target,
-    # which is specified via the backend argument.
-    #
-    # @param backend [BackendRunner] exposing the target to resources
-    # @return [ResourcesDSL]
-    def self.create_dsl(profile_context)
-      backend = profile_context.backend
-      my_registry = profile_context.resource_registry
-
-      Module.new do
-        define_method :resource_class do |profile_name, resource_name|
-          inner_context = if profile_name == profile_context.profile_id
-                            profile_context
-                          else
-                            profile_context.subcontext_by_name(profile_name)
-                          end
-
-          raise ProfileNotFound, "Cannot find profile named: #{profile_name}" if inner_context.nil?
-
-          inner_context.resource_registry[resource_name]
-        end
-
-        my_registry.each do |id, r|
-          define_method id.to_sym do |*args|
-            r.new(backend, id.to_s, *args)
-          end
-
-          # confirm backend custom resources have access to other custom resources
-          next if backend.respond_to?(id)
-
-          backend.class.send(:define_method, id.to_sym) do |*args|
-            r.new(backend, id.to_s, *args)
-          end
-        end
-
-        # attach backend so we have access to all resources and
-        # the train connection object
-        define_method :inspec do
-          backend
-        end
-      end
-    end
-  end
-
-  # Retrieve the base class for creating a new resource.
-  # Create classes that inherit from this class.
-  #
-  # @param [int] version the resource version to use
-  # @return [Resource] base class for creating a new resource
-  def self.resource(version)
-    validate_resource_dsl_version!(version)
-    require "inspec/plugin/v1/plugin_types/resource"
-    Inspec::Plugins::Resource
-  end
-
-  def self.validate_resource_dsl_version!(version)
-    raise "Only resource version 1 is supported!" if version != 1
-  end
-end
-
-# Many resources use FilterTable.
-require "inspec/utils/filter"
-# conflicts with global `gem` method so we need to pre-load this.
-require "inspec/resources/gem"

data/lib/inspec/resources.rb

@@ -1,130 +0,0 @@
-##
-# Now that resources are lazily loaded, this file is ONLY here for one
-# reason at this point, to load all the resources in order to populate
-# the registry for `inspec shell`'s `help commands`. There has to be a
-# cheaper way to do this, but this will do for now.
-#
-# NOTE: I intentionally didn't convert this to a loop over a simple
-# glob so this remains a sort of manifest for our resources.
-
-require "inspec/resource"
-
-# Detect if we are running the stripped-down inspec-core
-# This relies on AWS being stripped from the inspec-core gem
-inspec_core_only = ENV["NO_AWS"] || !File.exist?(File.join(File.dirname(__FILE__), "..", "resource_support", "aws.rb"))
-
-# Do not attempt to load cloud resources if we are in inspec-core mode
-unless inspec_core_only
-  require "resource_support/aws"
-  require "resources/azure/azure_backend.rb"
-  require "resources/azure/azure_generic_resource.rb"
-  require "resources/azure/azure_resource_group.rb"
-  require "resources/azure/azure_virtual_machine.rb"
-  require "resources/azure/azure_virtual_machine_data_disk.rb"
-end
-
-require "inspec/resources/aide_conf"
-require "inspec/resources/apache"
-require "inspec/resources/apache_conf"
-require "inspec/resources/apt"
-require "inspec/resources/audit_policy"
-require "inspec/resources/auditd"
-require "inspec/resources/auditd_conf"
-require "inspec/resources/bash"
-require "inspec/resources/bond"
-require "inspec/resources/bridge"
-require "inspec/resources/chocolatey_package"
-require "inspec/resources/command"
-require "inspec/resources/cran"
-require "inspec/resources/cpan"
-require "inspec/resources/crontab"
-require "inspec/resources/dh_params"
-require "inspec/resources/directory"
-require "inspec/resources/docker"
-require "inspec/resources/docker_container"
-require "inspec/resources/docker_image"
-require "inspec/resources/docker_plugin"
-require "inspec/resources/docker_service"
-require "inspec/resources/elasticsearch"
-require "inspec/resources/etc_fstab"
-require "inspec/resources/etc_group"
-require "inspec/resources/etc_hosts_allow_deny"
-require "inspec/resources/etc_hosts"
-require "inspec/resources/file"
-require "inspec/resources/filesystem"
-require "inspec/resources/firewalld"
-require "inspec/resources/gem"
-require "inspec/resources/groups"
-require "inspec/resources/grub_conf"
-require "inspec/resources/host"
-require "inspec/resources/http"
-require "inspec/resources/iis_app"
-require "inspec/resources/iis_app_pool"
-require "inspec/resources/iis_site"
-require "inspec/resources/inetd_conf"
-require "inspec/resources/interface"
-require "inspec/resources/ip6tables"
-require "inspec/resources/iptables"
-require "inspec/resources/kernel_module"
-require "inspec/resources/kernel_parameter"
-require "inspec/resources/key_rsa"
-require "inspec/resources/ksh"
-require "inspec/resources/limits_conf"
-require "inspec/resources/login_defs"
-require "inspec/resources/mount"
-require "inspec/resources/mssql_session"
-require "inspec/resources/mysql"
-require "inspec/resources/mysql_conf"
-require "inspec/resources/mysql_session"
-require "inspec/resources/nginx"
-require "inspec/resources/nginx_conf"
-require "inspec/resources/npm"
-require "inspec/resources/ntp_conf"
-require "inspec/resources/oneget"
-require "inspec/resources/oracledb_session"
-require "inspec/resources/os"
-require "inspec/resources/os_env"
-require "inspec/resources/package"
-require "inspec/resources/packages"
-require "inspec/resources/parse_config"
-require "inspec/resources/passwd"
-require "inspec/resources/pip"
-require "inspec/resources/platform"
-require "inspec/resources/port"
-require "inspec/resources/postfix_conf"
-require "inspec/resources/postgres"
-require "inspec/resources/postgres_conf"
-require "inspec/resources/postgres_hba_conf"
-require "inspec/resources/postgres_ident_conf"
-require "inspec/resources/postgres_session"
-require "inspec/resources/powershell"
-require "inspec/resources/processes"
-require "inspec/resources/rabbitmq_config"
-require "inspec/resources/registry_key"
-require "inspec/resources/security_identifier"
-require "inspec/resources/security_policy"
-require "inspec/resources/service"
-require "inspec/resources/shadow"
-require "inspec/resources/ssh_config"
-require "inspec/resources/ssl"
-require "inspec/resources/sys_info"
-require "inspec/resources/toml"
-require "inspec/resources/users"
-require "inspec/resources/vbscript"
-require "inspec/resources/virtualization"
-require "inspec/resources/windows_feature"
-require "inspec/resources/windows_hotfix"
-require "inspec/resources/windows_task"
-require "inspec/resources/wmi"
-require "inspec/resources/x509_certificate"
-require "inspec/resources/xinetd_conf"
-require "inspec/resources/yum"
-require "inspec/resources/zfs_dataset"
-require "inspec/resources/zfs_pool"
-
-# file formats, depend on json implementation
-require "inspec/resources/json"
-require "inspec/resources/yaml"
-require "inspec/resources/csv"
-require "inspec/resources/ini"
-require "inspec/resources/xml"