dev-sec-cis-benchmarks

What it is

This is a docker image that run the Chef Inspec versions of CIS-benchmarks from dev-sec.io with specified versions. These benchmarks are included:

• dil (distribution independent linux)
• docker
• kubernetes

The included benchmarks have their versions specified with git hashes. See ./config.sh for the git hashes that are included in this version.

The output are json-files that can be consumed by cis-benchmark-allure-reporter.

---

How to use

Run with:

export SERVER=<server-ip> export USER=<user-with-ssh-cert> \
docker container run --rm \
  -e SERVER=$SERVER -e -e USER=$USER \
  -v ~/.ssh:/share/ssh:ro \
  -v $(pwd)/output:/share/output \
  dev-sec-cis-benchmarks