linux-patch-baseline
linux-patch-baseline copied to clipboard
dev-sec
DevSec Linux Patch Baseline - InSpec Profile
Use 'sudo yum check-update -q" command to replace the original python library which has not been supported in RHEL8
The workflow release.yml is referencing action mikefarah/yq using references 3.2.1. However this reference is missing the commit [989b11764dd33fcb1f86c799cdfa34df727b12be](https://github.com/mikefarah/yq/commits/989b11764dd33fcb1f86c799cdfa34df727b12be) which may contain fix to the some vulnerability. The vulnerability fix that...
Hello Dev_Sec Team, can i know by when the support for the RHEL/CentOS 8 will be available ? Regards Amit
Don't think the CI bumped the version **Describe the bug** `inspec.yml` ``` --- name: linux-patch-baseline title: DevSec Linux Patch Benchmark summary: Verifies that all patches have been applied version: 0.6.1...
When this is used as a resource pack but the controls are not used it populates the output data with extra data. I think we should split this into a...
Although Amazon Linux can be roughly treated as RHEL / CentOS family, this will not work here, because inspec detects "amazon" instead of "redhat". Adding another condition to libraries/linux_updates.rb does...
- enable travis - enable kitchen verify in test-kitchen - errors in test kitchen verify are not an error for this profile, because they reflect a finding - we need...
