InSpec是一款人类和机器可读语言的基础设施开源测试框架,它用于确保规范性,安全性和政策要求。
# Disallow insecure protocols by testing describe package('telnetd') do it { should_not be_installed } end describe inetd_conf do its("telnet") { should eq nil } end
不管什么时候需要InSpec都能很容易地运行你的测试程序
# run test locally inspec exec test.rb # run test on remote host on SSH inspec exec test.rb -t ssh://user@hostname # run test on remote windows host on WinRM inspec exec test.rb -t winrm://Administrator@windowshost --password 'your-password' # run test on docker container inspec exec test.rb -t docker://container_id
特性:
Built-in Compliance: Compliance no longer occurs at the end of the release cycle
Targeted Tests: InSpec writes tests that specifically target compliance issues
Metadata: Includes the metadata required by security and compliance pros
Easy Testing: Includes a command-line interface to run tests quickly