{"id":28481489,"url":"https://github.com/dev-sec/cnspec-collection-baselines","last_synced_at":"2025-08-31T19:42:28.525Z","repository":{"id":162956538,"uuid":"638216889","full_name":"dev-sec/cnspec-collection-baselines","owner":"dev-sec","description":"DevSec Security Baselines provide battle tested hardening checks for Linux, SSH, nginx, MySQL in cnspec","archived":false,"fork":false,"pushed_at":"2024-08-06T09:21:38.000Z","size":20,"stargazers_count":4,"open_issues_count":3,"forks_count":1,"subscribers_count":6,"default_branch":"main","last_synced_at":"2025-07-04T17:43:10.537Z","etag":null,"topics":["hardening","security"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/dev-sec.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2023-05-09T10:23:17.000Z","updated_at":"2024-01-20T10:17:30.000Z","dependencies_parsed_at":null,"dependency_job_id":"ad1630f5-0227-43ac-89eb-5576449a4d1b","html_url":"https://github.com/dev-sec/cnspec-collection-baselines","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/dev-sec/cnspec-collection-baselines","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dev-sec%2Fcnspec-collection-baselines","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dev-sec%2Fcnspec-collection-baselines/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dev-sec%2Fcnspec-collection-baselines/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dev-sec%2Fcnspec-collection-baselines/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dev-sec","download_url":"https://codeload.github.com/dev-sec/cnspec-collection-baselines/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dev-sec%2Fcnspec-collection-baselines/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":273032931,"owners_count":25034067,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-31T02:00:09.071Z","response_time":79,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["hardening","security"],"created_at":"2025-06-07T20:07:30.225Z","updated_at":"2025-08-31T19:42:28.470Z","avatar_url":"https://github.com/dev-sec.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# cnspec DevSec Baseline Collection\n\n## Description\n\nThis repository provides the DevSec Baselines for [cnspec](github.com/mondoohq/cnspec) and includes the following DevSec Baselines:\n\n| Baseline                       | Version | Status                    |\n| ------------------------------ | ------- | ------------------------- |\n| DevSec Linux Security Baseline | 2.9.0   | in progress, 99% complete |\n\n## Installation\n\n- Install [cnspec](https://github.com/mondoohq/cnspec#installation)\n- minimum required `cnspec`-version is 8.8.0. \n\n## Using the DevSec Baselines\n\nScan local workstation or server:\n\n```bash\ncnspec scan local -f linux-baseline.mql.yaml\n```\n\nScan a running docker container:\n\n```bash\ncnspec scan docker 537f7fca28b9 -f linux-baseline.mql.yaml\n```\n\nScan a remote VM:\n\n```bash\ncnspec scan ssh user@hostip -f linux-baseline.mql.yaml\n```\n\n## Roadmap\n\n| Baseline                         | Status  |\n| -------------------------------- | ------- |\n| DevSec SSH Baseline              | planned |\n| DevSec Windows Security Baseline | planned |\n| DevSec Nginx Baseline            | planned |\n| DevSec SSL/TLS Baseline          | planned |\n| DevSec MySQL Baseline            | planned |\n| DevSec Apache Baseline           | planned |\n\n## Release Notes\n\nSee the [release notes](https://github.com/dev-sec/cnspec-collection-baselines/releases).\n\n## Kudos\n\nWe like to thank all maintainers of the InSpec baselines. This implementation of the DevSec Baselines for cnspec is based on the collective knowledge of the Apache 2 - Licensed DevSec Baselines for InSpec.\n\n## Licensing\n\nLicensed under the Apache License, Version 2.0 (the \"License\"); you may not use this file except in compliance with the License. You may obtain a copy of the License at\n\n\u003chttp://www.apache.org/licenses/LICENSE-2.0\u003e\n\nUnless required by applicable law or agreed to in writing, software distributed under the License is distributed on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdev-sec%2Fcnspec-collection-baselines","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdev-sec%2Fcnspec-collection-baselines","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdev-sec%2Fcnspec-collection-baselines/lists"}