respect inspec.yml supports with include_controls

[chris-rock]

Description

Whenever we build a meta-profile, we include controls from dependent profiles as following:

include_controls 'ssh-hardening'
include_controls 'os-hardening'
include_controls 'ssl-benchmark'
include_controls 'linux'
include_controls 'windows-patch-benchmark'

At this point, the include_controls do not respect the meta information attached in the dependent inspec.yml. controls should be skipped, if the supports from inspec.yml is not matching.

eg. os-hardening only executed on Linux:

name: os-hardening
title: Hardening Framework OS Hardening Test Suite
maintainer: Hardening Framework Team
copyright: Hardening Framework Team
copyright_email: hello@hardening.io
license: Apache 2 license
summary: Test-suite for best-preactice os hardening
version: 1.0.0
supports:
  - os-family: linux

the windows-patch-benchmark only executes on Windows:

name: windows-patch-benchmark
title: Windows Patch Benchmark
summary: Verifies all patches are applied
version: 0.3.0

maintainer: Christoph Hartmann
copyright: Christoph Hartmann
copyright_email: chris@lollyrock.com
license: MPLv2

supports:
  - os-family: windows

At this point, we do not allow an override of supports at the parent profile.

InSpec and Platform Version

0.34.0