diff --git a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/_index.md b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/_index.md index 9b1d2ed334..8798dde5f9 100644 --- a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/_index.md +++ b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/_index.md @@ -56,8 +56,7 @@ Chef offers [premium CIS- and STIG-based profiles](https://www.chef.io/products/ ### Learning -- [Learn Chef: Test Expectations with Chef InSpec](https://learn.chef.io/courses/course-v1:chef+Inspec101+Perpetual/about) -- [Learn Chef: Extending InSpec: InSpec Wrappers and Custom Resources](https://learn.chef.io/courses/course-v1:chef+InSpec201+Perpetual/about) +- [Chef Training](https://www.chef.io/training) - [Chef InSpec webinars](https://www.chef.io/webinars?products=chef-inspec&page=1) - [Chef Resource Library](https://www.chef.io/resources?products=chef-inspec&page=1) diff --git a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/cli.md b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/cli.md index 6c88a43990..4e36d1b28c 100644 --- a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/cli.md +++ b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/cli.md @@ -183,6 +183,12 @@ This subcommand has the following additional options: `--key-files=one two three` : Login key or certificate file for a remote scan. +`--kerberos-realm=KERBEROS_REALM` +: The Kerberos realm used for authentication (WinRM). This option can only be run from Linux workstations. + +`--kerberos-service=KERBEROS_SERVICE` +: The Kerberos service principal name (such as HTTP or HOST) (WinRM). This option can only be run from Linux workstations. + `--password=PASSWORD` : Login password for a remote scan, if required. @@ -213,6 +219,15 @@ This subcommand has the following additional options: `--shell-options=SHELL_OPTIONS` : Additional shell options. +`--socks-password=SOCKS_PASSWORD` +: The password for authenticating with a SOCKS5 proxy (WinRM). This option can only be run from Linux workstations. + +`--socks-proxy=SOCKS_PROXY` +: The SOCKS5H proxy URL to tunnel the WinRM connection (for example, `:1080`) (WinRM). This option can only be run from Linux workstations. + +`--socks-user=SOCKS_USER` +: The username for authenticating with a SOCKS5 proxy (WinRM). This option can only be run from Linux workstations. + `--ssl` `--no-ssl` : Use SSL for transport layer encryption (WinRM). @@ -386,6 +401,12 @@ This subcommand has the following additional options: `--key-files=one two three` : Login key or certificate file for a remote scan. +`--kerberos-realm=KERBEROS_REALM` +: The Kerberos realm used for authentication (WinRM). This option can only be run from Linux workstations. + +`--kerberos-service=KERBEROS_SERVICE` +: The Kerberos service principal name (such as HTTP or HOST) (WinRM). This option can only be run from Linux workstations. + `--password=PASSWORD` : Login password for a remote scan, if required. @@ -439,6 +460,15 @@ This subcommand has the following additional options: `--silence-deprecations=all|GROUP GROUP...` : Suppress deprecation warnings. See install_dir/etc/deprecations.json for a list of GROUPs or use 'all'. +`--socks-password=SOCKS_PASSWORD` +: The password for authenticating with a SOCKS5 proxy (WinRM). This option can only be run from Linux workstations. + +`--socks-proxy=SOCKS_PROXY` +: The SOCKS5H proxy URL to tunnel the WinRM connection (for example, `:1080`) (WinRM). This option can only be run from Linux workstations. + +`--socks-user=SOCKS_USER` +: The username for authenticating with a SOCKS5 proxy (WinRM). This option can only be run from Linux workstations. + `--ssh-config-file=one two three` : A list of paths to the SSH configuration file, for example: `~/.ssh/config` or `/etc/ssh/ssh_config`. @@ -870,6 +900,9 @@ This subcommand has the following additional options: `--enable-password=ENABLE_PASSWORD` : Password for enable mode on Cisco IOS devices. +`--enhanced-outcomes` +: Includes enhanced outcome of controls in report data. + `--host=HOST` : Specify a remote host which is tested. @@ -885,6 +918,12 @@ This subcommand has the following additional options: `--key-files=one two three` : Login key or certificate file for a remote scan. +`--kerberos-realm=KERBEROS_REALM` +: Kerberos realm used for authentication (WinRM). This option can only be run from Linux workstations. + +`--kerberos-service=KERBEROS_SERVICE` +: Kerberos service principal name (for example, HTTP, HOST) (WinRM). This option can only be run from Linux workstations. + `--password=PASSWORD` : Login password for a remote scan, if required. @@ -918,6 +957,15 @@ This subcommand has the following additional options: `--shell-options=SHELL_OPTIONS` : Additional shell options. +`--socks-password=SOCKS_PASSWORD` +: The password for authenticating with a SOCKS5 proxy (WinRM). This option can only be run from Linux workstations. + +`--socks-proxy=SOCKS_PROXY` +: The SOCKS5H proxy URL to tunnel the WinRM connection (for example, `:1080`) (WinRM). This option can only be run from Linux workstations. + +`--socks-user=SOCKS_USER` +: The username for authenticating with a SOCKS5 proxy (WinRM). This option can only be run from Linux workstations. + `--ssh-config-file=one two three` : A list of paths to the SSH configuration file, for example: `~/.ssh/config` or `/etc/ssh/ssh_config`. @@ -962,9 +1010,6 @@ This subcommand has the following additional options: `--winrm-transport=WINRM_TRANSPORT` : Specify which transport to use, defaults to negotiate (WinRM). -`--enhanced-outcomes` -: Includes enhanced outcome of controls in report data. - ## supermarket Supermarket commands. diff --git a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/cloud/azure.md b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/cloud/azure.md index 7e2ce26721..b3bc085110 100644 --- a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/cloud/azure.md +++ b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/cloud/azure.md @@ -14,7 +14,7 @@ Chef InSpec has resources for auditing Azure. ## Initialize an InSpec profile for auditing Azure -With Chef InSpec 4 or greater, you can create a profile for testing AWS resources with `inspec init profile`: +With Chef InSpec 4 or greater, you can create a profile for testing Azure resources with `inspec init profile`: ```bash $ inspec init profile --platform azure @@ -31,12 +31,12 @@ Create new profile at /Users/me/ Assuming the `inputs.yml` file contains your Azure project ID, you can execute this sample profile using the following command: ```bash -inspec exec --input-file=/inputs.yml -t gcp:// +inspec exec --input-file=/inputs.yml -t azure:// ``` ## Set Azure credentials -To use Chef InSpec Azure resources, you will need to create a Service Principal Name (SPN) for auditing an Azure subscription. +To use Chef InSpec Azure resources, create a Service Principal Name (SPN) to audit an Azure subscription. This can be done on the command line or from the Azure Portal: diff --git a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/plugin_kitchen_inspec.md b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/plugin_kitchen_inspec.md index 911ffacba8..f2a9c216d6 100644 --- a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/plugin_kitchen_inspec.md +++ b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/plugin_kitchen_inspec.md @@ -13,7 +13,7 @@ gh_repo = "inspec" Use Chef InSpec as a [Test Kitchen](https://kitchen.ci/) verifier with `kitchen-inspec`. -For hands-on examples, learn how to use Test Kitchen to run Chef InSpec profiles on the Learn Chef course [Validate Infrastructure Code with Test Kitchen](https://learn.chef.io/courses/course-v1:chef+LocalDev101+Perpetual/about). +For hands-on examples, learn how to use Test Kitchen to run Chef InSpec profiles on the Learn Chef course [Validate Infrastructure Code with Test Kitchen](https://www.chef.io/training/tutorials). Add the Chef InSpec verifier to the `.kitchen.yml` file: diff --git a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/profiles/_index.md b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/profiles/_index.md index 05708e0ddb..443e6f0ba2 100644 --- a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/profiles/_index.md +++ b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/profiles/_index.md @@ -16,7 +16,7 @@ Each profile is a standalone structure with its own distribution and execution f Chef InSpec supports complex test and compliance profiles, which organize controls to support dependency management and code reuse. -For hands-on examples, check out [Test Expectations with Chef InSpec](https://learn.chef.io/courses/course-v1:chef+Inspec101+Perpetual/about) on Learn Chef to learn more about how profiles are structured. +For hands-on examples, check out [Test Expectations with Chef InSpec](https://www.chef.io/training/tutorials) on Learn Chef to learn more about how profiles are structured. ## Initialize a new profile diff --git a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/profiles/custom_resources.md b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/profiles/custom_resources.md index 7d3f375600..e7592f1f6b 100644 --- a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/profiles/custom_resources.md +++ b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/profiles/custom_resources.md @@ -13,7 +13,7 @@ gh_repo = "inspec" You can extend the functionality of Chef InSpec profiles by creating custom resources. -For hands-on examples, check out [Extending InSpec: InSpec Wrappers and Custom Resources](https://learn.chef.io/courses/course-v1:chef+InSpec201+Perpetual/about) on Learn Chef. +For hands-on examples, check out [Extending InSpec: InSpec Wrappers and Custom Resources](https://www.chef.io/training/tutorials) on Learn Chef. ## Resource location diff --git a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/profiles/depends.md b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/profiles/depends.md index 9a7946c2c0..2f79bc4785 100644 --- a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/profiles/depends.md +++ b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/profiles/depends.md @@ -15,7 +15,7 @@ A Chef InSpec profile can bring in the controls and custom resources from anothe Chef InSpec profile. Additionally, when inheriting the controls of another profile, a profile can skip or even modify those included controls. -For hands-on examples, check out [Extending InSpec: InSpec Wrappers and Custom Resources](https://learn.chef.io/courses/course-v1:chef+InSpec201+Perpetual/about) on Learn Chef. +For hands-on examples, check out [Extending InSpec: InSpec Wrappers and Custom Resources](https://www.chef.io/training/tutorials) on Learn Chef. ## Define dependencies diff --git a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/reusable/md/support_commercial_platforms.md b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/reusable/md/support_commercial_platforms.md index cc7d600543..f031e3e5dc 100644 --- a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/reusable/md/support_commercial_platforms.md +++ b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/reusable/md/support_commercial_platforms.md @@ -2,9 +2,9 @@ | --- | --- | --- | | Amazon Linux | `x86_64`, `aarch64` | `2.x` | | Debian | `x86_64`, `aarch64` (10.x only) | `9`, `10`, `11` | -| macOS | `x86_64`, `aarch64` (M1 processors) | `11.x`, `12.x` | +| macOS | `x86_64`, `aarch64` (M1 processors) | `11.x`, `12.x`, `13.x`, `14.x` | | Oracle Enterprise Linux | `x86_64`, `aarch64` (7.x / 8.x only) | `6.x`, `7.x`, `8.x` | | Red Hat Enterprise Linux | `x86_64`, `aarch64` (7.x, 8.x and 9.x only) | `7.x`, `8.x`, `9.x` | | SUSE Linux Enterprise Server | `x86_64`, `aarch64` (15.x only) | `12.x`, `15.x` | | Ubuntu | `x86_64` | `16.04`, `18.04`, `20.04` | -| Windows | `x86_64` | `8.1`, `2012`, `2012 R2`, `2016`, `10` (all channels except "insider" builds), `2019`, `11`, `2022` | +| Windows | `x86_64` | `2016`, `10` (all channels except "insider" builds), `2019`, `11`, `2022` | diff --git a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/shell.md b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/shell.md index 4428af25e6..bf2965276f 100644 --- a/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/shell.md +++ b/_vendor/github.com/inspec/inspec/docs-chef-io/content/inspec/shell.md @@ -19,8 +19,7 @@ having to create a profile or write a test file. See [http://pryrepl.org/](http://pryrepl.org/) for an introduction to what pry is and what it can do. -See [Explore Chef InSpec resources](https://learn.chef.io/modules/explore-inspec-resources#/) -on Learn Chef for a hands-on example that uses Chef InSpec shell. +For a hands-on example that uses Chef InSpec shell, see the Learn Chef tutorial [Test Expectations with Chef InSpec](https://www.chef.io/training/tutorials). ## Launch the shell @@ -276,3 +275,46 @@ another_input: another_value ```bash inspec shell --input-file= ``` + +## Use the InSpec Shell with a SOCKS5 proxy + +You can use the InSpec Shell to target Windows nodes using WinRM through a SOCKS5 proxy. +These connections options can be run from Linux workstations. + +To start an InSpec Shell session with a basic SOCKS5 proxy connection: + +```bash +inspec shell -t winrm:// --socks-proxy socks5h://:1080 +``` + +To start an InSpec Shell session with a SOCKS5 proxy and authentication: + +```bash +inspec shell -t winrm:// \ + --socks-proxy socks5h://:1080 \ + --socks-user \ + --socks-password +``` + +To start an InSpec Shell session with a SOCKS5 proxy using SOCKS and Kerberos authentication: + +```bash +inspec shell -t winrm:// \ + --socks-proxy socks5h://:1080 \ + --socks-user \ + --socks-password \ + --kerberos-realm \ + --kerberos-service HTTP \ + --winrm_transport kerberos +``` + +Once you're connected through the SOCKS proxy, you can interact with Windows resources normally. For example: + +```ruby +inspec> os.family +=> "windows" +inspec> file('C:\Windows\System32').exist? +=> true +inspec> service('wuauserv').installed? +=> true +``` diff --git a/_vendor/modules.txt b/_vendor/modules.txt index 3eff71ef09..7d4a61f8c9 100644 --- a/_vendor/modules.txt +++ b/_vendor/modules.txt @@ -3,7 +3,7 @@ # github.com/habitat-sh/habitat/components/docs-chef-io v0.0.0-20250905124722-c1a4eb639cba # github.com/habitat-sh/on-prem-builder/docs-chef-io v0.0.0-20250805192817-f8b1dae05d5e # github.com/chef/chef-server/docs-chef-io v0.0.0-20250912093648-70b79ec99736 -# github.com/inspec/inspec/docs-chef-io v0.0.0-20250123110211-42364d842e34 +# github.com/inspec/inspec/docs-chef-io v0.0.0-20250922064622-0dc91d4a484a # github.com/inspec/inspec-alicloud/docs-chef-io v0.0.0-20240122032124-a1d2a214e170 # github.com/inspec/inspec-aws/docs-chef-io v0.0.0-20240122032232-049dcf822eef # github.com/inspec/inspec-azure/docs-chef-io v0.0.0-20250728075256-c374c23637d3 diff --git a/go.mod b/go.mod index 95b32abb97..2fe62deda7 100644 --- a/go.mod +++ b/go.mod @@ -22,7 +22,7 @@ require ( github.com/inspec/inspec-azure/docs-chef-io v0.0.0-20250728075256-c374c23637d3 // indirect github.com/inspec/inspec-habitat/docs-chef-io v0.0.0-20220218210405-bfd542da49fd // indirect github.com/inspec/inspec-k8s/docs-chef-io v0.0.0-20240122032042-421355eaf502 // indirect - github.com/inspec/inspec/docs-chef-io v0.0.0-20250123110211-42364d842e34 // indirect + github.com/inspec/inspec/docs-chef-io v0.0.0-20250922064622-0dc91d4a484a // indirect github.com/swiftype/swiftype-autocomplete-jquery v0.0.0-20190222215504-a90008d64b30 // indirect github.com/swiftype/swiftype-search-jquery v1.1.0 // indirect github.com/twitter/hogan.js v3.0.2+incompatible // indirect diff --git a/go.sum b/go.sum index 66828a7f1b..b303026d24 100644 --- a/go.sum +++ b/go.sum @@ -36,8 +36,8 @@ github.com/inspec/inspec-habitat/docs-chef-io v0.0.0-20220218210405-bfd542da49fd github.com/inspec/inspec-habitat/docs-chef-io v0.0.0-20220218210405-bfd542da49fd/go.mod h1:Q4E7QBY4b7HDE2psfGT9jqvnLq1yfg5e9KWK4VTtI/M= github.com/inspec/inspec-k8s/docs-chef-io v0.0.0-20240122032042-421355eaf502 h1:l3NT3O2TWWbp1XTeolWRNreLWoWornD4S8+h9uIVIc0= github.com/inspec/inspec-k8s/docs-chef-io v0.0.0-20240122032042-421355eaf502/go.mod h1:JwjkNHKgELWxc9esXuK3ELEGL371pK496OKrK+te3Lk= -github.com/inspec/inspec/docs-chef-io v0.0.0-20250123110211-42364d842e34 h1:se6Ac86tEw0RchM5kxd9jbNNm4U8IbisuhyB9shwZLI= -github.com/inspec/inspec/docs-chef-io v0.0.0-20250123110211-42364d842e34/go.mod h1:k41HVhnK+v9/X2qCX+axYBM6eME3kFeatloWoMLxXQU= +github.com/inspec/inspec/docs-chef-io v0.0.0-20250922064622-0dc91d4a484a h1:+XKAV3Ka9nMLhtuorClEXTYsrZPJ3okZk1LkNKJYL0o= +github.com/inspec/inspec/docs-chef-io v0.0.0-20250922064622-0dc91d4a484a/go.mod h1:k41HVhnK+v9/X2qCX+axYBM6eME3kFeatloWoMLxXQU= github.com/swiftype/swiftype-autocomplete-jquery v0.0.0-20190222215504-a90008d64b30 h1:dhqLFBINtD1rMwwd5s9INu4BkciCvQUd+r+CWUYWIB4= github.com/swiftype/swiftype-autocomplete-jquery v0.0.0-20190222215504-a90008d64b30/go.mod h1:qnxTyatkwE84LvoaQLPaLB4h5M3n6Q2z+SB/96DcAK8= github.com/swiftype/swiftype-search-jquery v1.1.0 h1:VRYyWPQtf3Vl3B5W2xQJuFVoUBlBFGQ4tOTu94b8mNU=