inspec 4.18.51 → 4.18.85

data/etc/deprecations.json

@@ -1,125 +0,0 @@
-{
-  "file_version": "1.0.0",
-  "unknown_group_action": "ignore",
-  "groups": {
-    "attrs_value_replaces_default": {
-      "action": "warn",
-      "prefix": "The 'default' option for attributes is being replaced by 'value' - please use it instead."
-    },
-    "attrs_dsl": {
-      "action": "ignore",
-      "comment": "See #3853",
-      "prefix": "The 'attribute' DSL keyword is being replaced by 'input' - please use it instead."
-    },
-    "attrs_rename_in_metadata": {
-      "action": "ignore",
-      "comment": "See 3854",
-      "prefix": "Inputs should be specified by using the 'inputs' key in profile metadata, not 'attributes'."
-    },
-    "aws_resources_in_resource_pack": {
-      "comment": "See #3822",
-      "action": "warn",
-      "prefix": "AWS resources shipped with core InSpec are being to moved to a resource pack for faster iteration. Please update your profiles to depend on git@github.com:inspec/inspec-aws.git ."
-    },
-    "cli_option_json_config": {
-      "action": "ignore",
-      "prefix": "The --json-config option is being replaced by the --config option.",
-      "comment": "See #3661"
-    },
-    "file_resource_be_mounted_matchers": {
-      "action": "fail_control",
-      "suffix": "This will not be supported in InSpec 4.0."
-    },
-    "host_resource_proto_usage": {
-      "action": "fail_control",
-      "suffix": "This will not be supported in InSpec 4.0."
-    },
-    "inspec_ui_methods": {
-      "action": "ignore",
-      "suffix": "Please call `cli.ui` directly",
-      "comment": "See #3715"
-    },
-    "mssql_session_pass_option": {
-      "action": "exit",
-      "suffix": "This will not be supported in InSpec 4.0."
-    },
-    "oracledb_session_pass_option": {
-      "action": "exit",
-      "suffix": "This is not supported in InSpec 4.0."
-    },
-    "property_filesystem_size": {
-      "action": "warn",
-      "comment": "See #3778"
-    },
-    "property_processes_list": {
-      "action": "fail_control",
-      "suffix": "This property was removed in InSpec 4.0."
-    },
-    "properties_aws_iam_user": {
-      "action": "fail_control",
-      "suffix": "This property was removed in InSpec 4.0."
-    },
-    "properties_shadow": {
-      "action": "fail_control",
-      "suffix": "This property was removed in InSpec 4.0."
-    },
-    "rename_attributes_to_inputs": {
-      "action": "warn",
-      "prefix": "InSpec Attributes are being renamed to InSpec Inputs to avoid confusion with Chef Attributes.",
-      "comment": "See #3802"
-    },
-    "resource_apache": {
-      "action": "exit",
-      "suffix": "This resource was removed in InSpec 4.0."
-    },
-    "resource_azure_generic_resource": {
-      "action": "warn",
-      "prefix": "The azure_generic_resource is deprecated. Please use a specific resource. See: 'https://github.com/inspec/inspec/issues/3131'"
-    },
-    "resource_iis_website": {
-      "action": "exit",
-      "suffix": "This resource was removed in InSpec 4.0.",
-      "comment": "Needed for ServerSpec compatibility"
-    },
-    "resource_linux_kernel_parameter": {
-      "action": "exit",
-      "suffix": "This resource was removed in InSpec 4.0.",
-      "comment": "Needed for ServerSpec compatibility"
-    },
-    "resource_ppa": {
-      "action": "exit",
-      "suffix": "This resource was removed in InSpec 4.0.",
-      "comment": "Needed for ServerSpec compatibility"
-    },
-    "resource_script": {
-      "action": "exit",
-      "suffix": "This resource will be removed in InSpec 4.0"
-    },
-    "resource_user_serverspec_compat": {
-      "action": "fail_control"
-    },
-    "resource_windows_registry_key": {
-      "action": "exit",
-      "suffix": "This resource was removed in InSpec 4.0.",
-      "comment": "Needed for ServerSpec compatibility"
-    },
-    "serverspec_compatibility": {
-      "action": "warn",
-      "suffix": "This is only allowed for compatibility with ServerSpec"
-    },
-    "supports_syntax": {
-      "action": "warn"
-    },
-    "mount_parser_serverspec_compat": {
-      "action": "fail_control"
-    },
-    "wmi_non_hash_usage": {
-      "action": "fail_control",
-      "suffix": "This property was removed in InSpec 4.0."
-    },
-    "object_classes": {
-      "action": "warn",
-      "suffix": "These classes will be removed in InSpec 5.0."
-    }
-  }
-}

data/etc/plugin_filters.json

@@ -1,45 +0,0 @@
-{
-  "file_version": "1.0.0",
-  "exclude": [
-    {
-      "plugin_name": "inspec-core",
-      "rationale": "This gem is a stripped-down alternate packaging of InSpec. It is not a plugin."
-    },
-    {
-      "plugin_name": "inspec-bin",
-      "rationale": "This gem contains the executable for Chef InSpec.  It is not a plugin."
-    },
-    {
-      "plugin_name": "inspec-core-bin",
-      "rationale": "This gem contains the executable for a lightweight version of Chef InSpec. It is not a plugin."
-    },
-    {
-      "plugin_name": "inspec-k8s",
-      "rationale": "This gem is currently only a placeholder, waiting to be built."
-    },
-    {
-      "plugin_name": "inspec-multi-server",
-      "rationale": "This gem is a script that attempts to drive a parallel execution of InSpec by wrapping and forking. It is not a plugin."
-    },
-    {
-      "plugin_name": "inspec-release",
-      "rationale": "This gem is currently only a placeholder, waiting to be built."
-    },
-    {
-      "plugin_name": "train-vault",
-      "rationale": "This gem is currently only a placeholder, waiting to be built."
-    },
-    {
-      "plugin_name": "train-tax-calculator",
-      "rationale": "This gem is a tax calculation tool for the Philippines. It has nothing to do the Chef Train remote execution framework, or the InSpec project."
-    },
-    {
-      "plugin_name": "inspec-plugin-example",
-      "rationale": "This gem is an early self-taught example of a v1 plugin. Please use inspec-resource-lister as an example for PluginV2 development."
-    },
-    {
-      "plugin_name": "train-core",
-      "rationale": "This gem is a stripped-down alternate packaging of Train. It is not a plugin."
-    }
-  ]
-}

data/lib/bundles/README.md

@@ -1,3 +0,0 @@
-# InSpec Bundled Plugins
-
-This directory contains bundled InSpec plugins. Those plugins are shipped with InSpec temporarily only. Over the next months we are going to stabilize the InSpec Plugin API. Once this API reached stability, all bundled plugins will be externalized.

data/lib/bundles/inspec-compliance/api.rb

@@ -1,7 +0,0 @@
-# This file has been moved to the v2.0 plugins. This redirect allows for legacy use.
-# TODO: Remove in inspec 4.0
-
-require "plugins/inspec-compliance/lib/inspec-compliance/api"
-
-# Backport old namespace
-Compliance = InspecPlugins::Compliance unless defined?(Compliance)

data/lib/bundles/inspec-compliance/configuration.rb

@@ -1,7 +0,0 @@
-# This file has been moved to the v2.0 plugins. This redirect allows for legacy use.
-# TODO: Remove in inspec 4.0
-
-require "plugins/inspec-compliance/lib/inspec-compliance/configuration"
-
-# Backport old namespace
-Compliance = InspecPlugins::Compliance unless defined?(Compliance)

data/lib/bundles/inspec-compliance/http.rb

@@ -1,7 +0,0 @@
-# This file has been moved to the v2.0 plugins. This redirect allows for legacy use.
-# TODO: Remove in inspec 4.0
-
-require "plugins/inspec-compliance/lib/inspec-compliance/http"
-
-# Backport old namespace
-Compliance = InspecPlugins::Compliance unless defined?(Compliance)

data/lib/bundles/inspec-compliance/support.rb

@@ -1,7 +0,0 @@
-# This file has been moved to the v2.0 plugins. This redirect allows for legacy use.
-# TODO: Remove in inspec 4.0
-
-require "plugins/inspec-compliance/lib/inspec-compliance/support"
-
-# Backport old namespace
-Compliance = InspecPlugins::Compliance unless defined?(Compliance)

data/lib/bundles/inspec-compliance/target.rb

@@ -1,7 +0,0 @@
-# This file has been moved to the v2.0 plugins. This redirect allows for legacy use.
-# TODO: Remove in inspec 4.0
-
-require "plugins/inspec-compliance/lib/inspec-compliance/target"
-
-# Backport old namespace
-Compliance = InspecPlugins::Compliance unless defined?(Compliance)

data/lib/bundles/inspec-supermarket.rb

@@ -1,9 +0,0 @@
-libdir = File.dirname(__FILE__)
-$LOAD_PATH.unshift(libdir) unless $LOAD_PATH.include?(libdir)
-
-module Supermarket
-  autoload :API, "inspec-supermarket/api"
-end
-
-require "inspec-supermarket/cli"
-require "inspec-supermarket/target"

data/lib/bundles/inspec-supermarket/README.md

@@ -1,45 +0,0 @@
-# InSpec Extension for Chef Supermarket
-
-To use the CLI, this InSpec add-on adds the following commands:
-
- * `$ inspec supermarket configure` - configures the supermarket server
- * `$ inspec supermarket search` - searches for a compliance profile on supermarket
- * `$ inspec supermarket exec nathenharvey/tmp-compliance-profile` - extends execute to load the profile
-
- Compliance profiles from Supermarket can be executed in two ways:
-
- - via supermarket exec: `inspec supermarket exec nathenharvey/tmp-compliance-profile`
- - via supermarket scheme: `inspec exec supermarket://nathenharvey/tmp-compliance-profile`
-
-## Usage
-
-```
-$ inspec supermarket
-Commands:
-  inspec supermarket exec PROFILE    # execute a Supermarket profile
-  inspec supermarket help [COMMAND]  # Describe subcommands or one specific subcommand
-  inspec supermarket info PROFILE    # display Supermarket profile details
-  inspec supermarket profiles        # list all available profiles in Chef Supermarket
-
-$ inspec supermarket profiles
-Available profiles:
--------------------
- * nathenharvey/tmp-compliance-profile
- * hardening/os-hardening
- * hardening/ssh-hardening
-
-$ inspec supermarket info hardening/os-hardening
-name:   os-hardening
-owner:  hardening
-url:    https://github.com/dev-sec/tests-os-hardening
-
-description:   Base Linux Compliance profile, used for Security + DevOps. More Information is available at http://dev-sec.io/
-
-$ inspec exec supermarket://hardening/os-hardening
-........F.F.................F......FFF.....FFFF.F........FF....FFFFFFF...FF.FFFFFF.FFFFFFFFFFF.F...
-
-...
-
-Finished in 3.81 seconds (files took 5.69 seconds to load)
-99 examples, 40 failures
-```

data/lib/bundles/inspec-supermarket/api.rb

@@ -1,87 +0,0 @@
-# frozen_string_literal: true
-
-require "net/http"
-require "addressable/uri"
-
-module Supermarket
-  class API
-    SUPERMARKET_URL = "https://supermarket.chef.io"
-
-    # displays a list of profiles
-    def self.profiles(supermarket_url = SUPERMARKET_URL)
-      url = "#{supermarket_url}/api/v1/tools-search"
-      _success, data = get(url, { type: "compliance_profile", items: 100 })
-      if !data.nil?
-        profiles = JSON.parse(data)
-        profiles["items"].map do |x|
-          m = %r{^#{supermarket_url}/api/v1/tools/(?<slug>[\w-]+)(/)?$}.match(x["tool"])
-          x["slug"] = m[:slug]
-          x
-        end
-      else
-        []
-      end
-    end
-
-    def self.profile_name(profile)
-      # We use Addressable::URI here because URI has a bug in Ruby 2.1.x where it doesn't allow underscore in host
-      uri = Addressable::URI.parse profile
-      [uri.host, uri.path[1..-1]]
-    rescue
-      nil
-    end
-
-    # displays profile infos
-    def self.info(profile, supermarket_url = SUPERMARKET_URL)
-      _tool_owner, tool_name = profile_name("supermarket://#{profile}")
-      return if tool_name.nil? || tool_name.empty?
-
-      # Tool name in Supermarket URL is downcased so we need to downcase
-      url = "#{supermarket_url}/api/v1/tools/#{tool_name.downcase}"
-      _success, data = get(url, {})
-      JSON.parse(data) unless data.nil?
-    rescue JSON::ParserError
-      nil
-    end
-
-    # compares a profile with the supermarket tool info
-    def self.same?(profile, supermarket_tool, supermarket_url = SUPERMARKET_URL)
-      tool_owner, tool_name = profile_name(profile)
-
-      raise "Could not parse tool name from #{profile}" if tool_name.nil?
-
-      # Tool name in Supermarket URL is downcased so we need to downcase
-      tool = "#{supermarket_url}/api/v1/tools/#{tool_name.downcase}"
-      supermarket_tool["tool_owner"] == tool_owner && supermarket_tool["tool"] == tool
-    end
-
-    def self.find(profile, supermarket_url = SUPERMARKET_URL)
-      profiles = Supermarket::API.profiles(supermarket_url)
-      return if profiles.empty?
-
-      index = profiles.index { |t| same?(profile, t, supermarket_url) }
-      # return profile or nil
-      profiles[index] if !index.nil? && index >= 0
-    end
-
-    # verifies that a profile exists
-    def self.exist?(profile, supermarket_url = SUPERMARKET_URL)
-      !find(profile, supermarket_url).nil?
-    end
-
-    def self.get(url, params)
-      uri = URI.parse(url)
-      uri.query = URI.encode_www_form(params)
-      req = Net::HTTP::Get.new(uri)
-      send_request(uri, req)
-    end
-
-    def self.send_request(uri, req)
-      # send request
-      res = Net::HTTP.start(uri.host, uri.port, use_ssl: uri.scheme == "https") do |http|
-        http.request(req)
-      end
-      [res.is_a?(Net::HTTPSuccess), res.body]
-    end
-  end
-end

data/lib/bundles/inspec-supermarket/cli.rb

@@ -1,71 +0,0 @@
-require "inspec/base_cli"
-
-module Supermarket
-  class SupermarketCLI < Inspec::BaseCLI
-    namespace "supermarket"
-
-    # TODO: find another solution, once https://github.com/erikhuda/thor/issues/261 is fixed
-    def self.banner(command, _namespace = nil, _subcommand = false)
-      "#{basename} #{subcommand_prefix} #{command.usage}"
-    end
-
-    def self.subcommand_prefix
-      namespace
-    end
-
-    desc "profiles", "list all available profiles in Chef Supermarket"
-    def profiles
-      # display profiles in format user/profile
-      supermarket_profiles = Supermarket::API.profiles
-
-      headline("Available profiles:")
-      supermarket_profiles.each do |p|
-        li("#{p["tool_name"]} #{mark_text(p["tool_owner"] + "/" + p["slug"])}")
-      end
-    end
-
-    desc "exec PROFILE", "execute a Supermarket profile"
-    exec_options
-    def exec(*tests)
-      o = config
-      diagnose(o)
-      configure_logger(o)
-
-      # iterate over tests and add compliance scheme
-      tests = tests.map { |t| "supermarket://" + t }
-
-      runner = Inspec::Runner.new(o)
-      tests.each { |target| runner.add_target(target) }
-
-      exit runner.run
-    rescue ArgumentError, RuntimeError, Train::UserError => e
-      $stderr.puts e.message
-      exit 1
-    end
-
-    desc "info PROFILE", "display Supermarket profile details"
-    def info(profile)
-      # check that the profile is available
-      supermarket_profiles = Supermarket::API.profiles
-      found = supermarket_profiles.select do |p|
-        profile == "#{p["tool_owner"]}/#{p["slug"]}"
-      end
-
-      if found.empty?
-        puts "#{mark_text(profile)} is not available on Supermarket"
-        return
-      end
-
-      # load details for the specific profile
-      info = Supermarket::API.info(profile)
-      puts "#{mark_text("name: ")}  #{info["slug"]}"
-      puts "#{mark_text("owner:")}  #{info["owner"]}"
-      puts "#{mark_text("url:  ")}  #{info["source_url"]}"
-      puts
-      puts "#{mark_text("description:  ")} #{info["description"]}"
-    end
-  end
-
-  # register the subcommand to InSpec CLI registry
-  Inspec::Plugins::CLI.add_subcommand(SupermarketCLI, "supermarket", "supermarket SUBCOMMAND ...", "Supermarket commands", {})
-end

data/lib/bundles/inspec-supermarket/target.rb

@@ -1,31 +0,0 @@
-require "uri"
-require "inspec/fetcher"
-require "inspec/fetcher/url"
-
-# InSpec Target Helper for Supermarket
-module Supermarket
-  class Fetcher < Inspec.fetcher(1)
-    name "supermarket"
-    priority 500
-
-    def self.resolve(target, opts = {})
-      supermarket_uri, supermarket_server = if target.is_a?(String) && URI(target).scheme == "supermarket"
-                                              [target, Supermarket::API::SUPERMARKET_URL]
-                                            elsif target.respond_to?(:key?) && target.key?(:supermarket)
-                                              supermarket_server = target[:supermarket_url] || Supermarket::API::SUPERMARKET_URL
-                                              ["supermarket://#{target[:supermarket]}", supermarket_server]
-                                            end
-      return nil unless supermarket_uri
-      return nil unless Supermarket::API.exist?(supermarket_uri, supermarket_server)
-
-      tool_info = Supermarket::API.find(supermarket_uri, supermarket_server)
-      resolve_next(tool_info["tool_source_url"], opts)
-    rescue URI::Error
-      nil
-    end
-
-    def to_s
-      "Chef Compliance Profile Loader"
-    end
-  end
-end