Use CINC (instead of InSpec 4)

[mcgege]

At the moment we stick to version 3, as there are some license issues with v4. In addition the deprecation warnings in the baselines should be solved first.

See dev-sec/linux-baseline#115 and dev-sec/apache-baseline#31

[mcgege]

And also see if the fix for faraday (#228) can be removed then

[mcgege]

There is now an open source alternative: CINC
We should try to go in this direction instead of InSpec 4

[aaronlippold]

Cinc is the chef client and auditor is inspec

…

On Wed, Jan 15, 2020, 7:36 AM Michael Geiger ***@***.***> wrote: There is now an open source alternative: CINC <https://cinc.sh/> We should try to go in this direction instead of InSpec 4 — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#212?email_source=notifications&email_token=AALK42CLX7TS3YMQ2IRVPOLQ537NXA5CNFSM4HSJPWK2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEJAFICY#issuecomment-574641163>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AALK42FIDD24AXZTMIDHPD3Q537NXANCNFSM4HSJPWKQ> .

[mcgege]

Right, the cinc-auditor is the substitution for inspec ... but both is hosted on this webpage / project

[timstoop]

Slightly off topic, but what's wrong with inspec 4 exactly? Seems to be an Apache license, according to Github: https://github.com/inspec/inspec/blob/master/LICENSE

Never mind, found it. Things like this: https://twitter.com/nellshamrell/status/1136333909577281536

[chris-rock]

Once the Cinc Auditor is approved by Chef, we will be able to switch to the latest version again

[mcgege]

fixed by #238