InSpec是一款人类和机器可读语言的基础设施开源测试框架,它用于确保规范性,安全性和政策要求。
# Disallow insecure protocols by testingdescribe package('telnetd') do it { should_not be_installed } end describe inetd_conf do its("telnet") { should eq nil }end不管什么时候需要InSpec都能很容易地运行你的测试程序
# run test locallyinspec exec test.rb# run test on remote host on SSHinspec exec test.rb -t ssh://user@hostname# run test on remote windows host on WinRMinspec exec test.rb -t winrm://Administrator@windowshost --password 'your-password'# run test on docker containerinspec exec test.rb -t docker://container_id特性:
Built-inCompliance:Compliancenolongeroccursattheendofthereleasecycle
TargetedTests:InSpecwritesteststhatspecificallytargetcomplianceissues
Metadata:Includesthemetadatarequiredbysecurityandcompliancepros
EasyTesting:Includesacommand-lineinterfacetoruntestsquickly
评论