saf-training/courses/user/06

[giscus[bot]]

saf-training/courses/user/06

The MITRE Security Automation Framework Team's Introduction to InSpec profile development

https://mitre.github.io/saf-training/courses/user/06.html

[drclphibbs]

In 6.1 the "Installation Tab" link gives 404 error.

[wdower]

Fixed. Thanks.

[grouse142]

What_Is_The_Target needs an example of a file path for a target (i.e., docker container in GitHub).

[karikarshivani]

In 6.1-2, we should probably mention that your local machine can also be a target

[karikarshivani]

6.2: ...trying to do in the first place. inspec exec tells InSpec to execute an existing profile.

[karikarshivani]

You could test against your local machine (which is less common and doesn't require you to use -t)

[karikarshivani]

We use the NGINX target that is running via docker in our Codespace environment by stating -t docker://nginx

[karikarshivani]

Change ./lab-setup.sh to ./build-lab.sh

[karikarshivani]

Consider adding --enhanced-outcomes flag

[karikarshivani]

In the 'Want to give it a try?' section, maybe we can add a note about how all the metadata doesn't come through in the cli output but we will see its value in Heimdall