InSpec审核和测试框架
InSpec是一款人类和机器可读语言的基础设施开源测试框架，它用于确保规范性，安全性和政策要求。
# Disallow insecure protocols by testing
describe package('telnetd') do
it { should_not be_installed }
end
describe inetd_conf do
its("telnet") { should eq nil }
end
不管什么时候需要InSpec都能很容易地运行你的测试程序
# run test locally inspec exec test.rb # run test on remote host on SSH inspec exec test.rb -t ssh://user@hostname # run test on remote windows host on WinRM inspec exec test.rb -t winrm://Administrator@windowshost --password 'your-password' # run test on docker container inspec exec test.rb -t docker://container_id
特性：
Built-in Compliance: Compliance no longer occurs at the end of the release cycle
Targeted Tests: InSpec writes tests that specifically target compliance issues
Metadata: Includes the metadata required by security and compliance pros
Easy Testing: Includes a command-line interface to run tests quickly
评论