InSpec - 审核和测试框架


Apache
跨平台
C/C++

软件简介

InSpec是一款人类和机器可读语言的基础设施开源测试框架,它用于确保规范性,安全性和政策要求。

# Disallow insecure protocols by testing
describe package('telnetd') do
  it { should_not be_installed }
  end
  describe inetd_conf do
    its("telnet") { should eq nil }
end

不管什么时候需要InSpec都能很容易地运行你的测试程序

# run test locally
inspec exec test.rb
# run test on remote host on SSH
inspec exec test.rb -t ssh://user@hostname
# run test on remote windows host on WinRM
inspec exec test.rb -t winrm://Administrator@windowshost --password 'your-password'
# run test on docker container
inspec exec test.rb -t docker://container_id

特性:

  • Built-in Compliance: Compliance no longer occurs at the end of the release cycle

  • Targeted Tests: InSpec writes tests that specifically target compliance issues

  • Metadata: Includes the metadata required by security and compliance pros

  • Easy Testing: Includes a command-line interface to run tests quickly