Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
Vendor dependent profiles in archive #1283
Lets assume we have a meta-profile like https://github.com/chris-rock/acme-inspec-profile
That depends on a couple of other profiles:
Now we can use InSpec to archive the profile:
Only the profile is packaged, not the dependencies.
I still need all dependencies available and accessible at their location during runtime
InSpec and Platform Version
We create a
The archive will include the
Please include the stacktrace output or link to a gist of it, if there is one.
I really like this approach, it will serve us well.
One potential confusing aspect is that a user should not look to the Compliance UI for dependencies, or else can do so but look (on the UI) inside of the profile as a similar tree level.
To me that's straightforward, I'm just saying keep it straightforward at all levels.