No description, website, or topics provided.
Switch branches/tags
Nothing to show
Clone or download
lizrice Merge pull request #16 from liranaqua/openshift-3.9
added docker 1.13.0 profile for openshift 3.9
Latest commit 8db9a36 Sep 4, 2018

README.md

License

Docker-bench is a Go application that checks whether Docker is deployed securely by running the checks documented in the CIS Docker Benchmark.

Tests are configured with YAML files, making this tool easy to update as test specifications evolve.

CIS Docker Benchmark support

docker-bench currently supports tests for multiple versions of Docker (1.13, and 17.06). docker-bench will determine the test set to run based on the Docker version running on the host machine. The version to run tests for can also be specified manually with the --version <ver> commandline flag.

Installation

Installing from sources

Intall Go, then clone this repository and run as follows (assuming your $GOPATH is set):

go get github.com/aquasecurity/docker-bench
cd $GOPATH/src/github.com/aquasecurity/docker-bench
go build -o docker-bench .

# See all supported options
./docker-bench --help

# Run checks
./docker-bench

# Run checks for specified Docker version
./docker-bench --version 1.13.0

Tests

Tests are specified in definition files cfg/<version>/definitions.yaml. Where` is the version of docker for which the test applies.

Contributing

We welcome PRs and issue reports.