{"id":18524512,"url":"https://github.com/stelligent/inspector-status","last_synced_at":"2025-07-16T23:36:46.375Z","repository":{"id":10535595,"uuid":"65934423","full_name":"stelligent/inspector-status","owner":"stelligent","description":"A pipeline plugin to get the AWS Inspector findings from AWS Resources","archived":false,"fork":false,"pushed_at":"2022-06-07T21:16:30.000Z","size":22,"stargazers_count":6,"open_issues_count":4,"forks_count":7,"subscribers_count":77,"default_branch":"master","last_synced_at":"2025-04-10T04:11:01.877Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/stelligent.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2016-08-17T19:03:52.000Z","updated_at":"2021-03-26T05:06:28.000Z","dependencies_parsed_at":"2022-07-24T20:16:31.251Z","dependency_job_id":null,"html_url":"https://github.com/stelligent/inspector-status","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/stelligent/inspector-status","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stelligent%2Finspector-status","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stelligent%2Finspector-status/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stelligent%2Finspector-status/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stelligent%2Finspector-status/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/stelligent","download_url":"https://codeload.github.com/stelligent/inspector-status/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stelligent%2Finspector-status/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":265550495,"owners_count":23786579,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-06T17:42:08.027Z","updated_at":"2025-07-16T23:36:46.356Z","avatar_url":"https://github.com/stelligent.png","language":"Ruby","funding_links":[],"categories":[],"sub_categories":[],"readme":"# AWS Inspector Status\n\nThis is a tool to execute AWS inspector templates against targets and report the findings from the runs via JSON. Specifically this is made to be integrated into a CI/CD Pipeline.\n\n## What it does\n  * Creates an AWS Inspector target\n  * Creates an AWS Inspector template\n  * Runs an AWS Inspector asessment run\n  * Reports the findings of that assessment to stdout\n\n## How it does it\n\nThis tool uses the aws-sdk to programmatically interact with the AWS Inspector API to create, modify, run and delete resources. \n\nAt the moment of this writing Cloudformation does not support Inspector. This tool uses a config file and/or CLI arguments to build the attributes needed to create these resources.\n\nThe results are then printed to stdout for consumption by reporting/pipeline functions. Inspector runs assessments against resource targets, these are tagged AWS Resources (instances, services, etc). \n\nNote: Your resources should already be tagged with whatever you will have set in your target_tags in the config file.\n\n## Requirements / Setup\n\n* A modern Ruby of the 2.x variety\n* AWS IAM role with proper permissions to AWS Inspector OR one of the following configuration methods for [aws-sdk](https://github.com/aws/aws-sdk-ruby#configuration). Also ensure you configure against the proper region.\n* Tagged AWS resources in the region you plan to inspect against\n* Git to clone out the repo\n\n## Installation\n\nThis method assumes you want to use whatever settings are setup in the config.yml provided in the top level directory of this repo. See below for CLI args.\n\n```\ngit clone git@github.com:stelligent/inspector-status.git\ncd inspector-status\nbundle install\nrake run\n```\n\n## Tests\n\nNote: Testing exclusively lint checking at this time, the methods require almost exclusively hitting the AWS API via aws-sdk. Inspector does not support cloudformation and the awspec gem does not support inspector either. \n\nSupport for inspector into awspec is being worked on to fill this void and give us true rspec unit testing.\n\n`rake test`\n\n## AWS Resources\n\nResources are created in AWS with whatever name prefix you choose in the config file OR the command line, This creates resources with the prefix-name, a random string, and then the type concatenated. By default resources will be cleaned up after. The run/findings will be left in your AWS account for posterity.\n\n## Options\nNote: The provided config file has all of these options. If an option is provided below then the config file's option will be overridden by the CLI argument.\n\n```\nUsage: ./inspector.rb [options]\n  -c, --config CFILE               Config file to get config options from, defaults to config.yml\n  -n, --aws-name-prefix NAME       Name to prefix before any created AWS Resources\n  -f, --failure-metrics FAILURES   Comma separated key/value of failure metrics, e.g. numeric_severity:3,indicator_of_compromise:true\n  -r, --rules-to-run RULES         Comma separated list of rules to run, using the following abbreviations:\n                                       SEC = Security Best Practices\n                                       RUN = Runtime Behavior Analysis\n                                       COM = Common Vulnerabilities and Exposures\n                                       CIS = CIS Operating System Security Configuration Benchmarks\n                                   e.g. -r SEC,RUN\n  -t, --target-tags TAGS           Comma separated list of AWS Resource tags to target for inspection, e.g. auditable:true,mybuild=333\n  -d, --asset-duration DUR         Duration in seconds to run the assessment for\n  -x, --[no-]cleanup-resources     Determines if resources created in AWS (Targets, templates \u0026 Runs) should be deleted after we are done\n```\n\n## Evaluate for failure\nThe evaluate for failure configuration is a method of failing your CI pipeline/toolchain when a severity, or compromise greater than what you have set has occurred. \n\nThis works on numeric and/or true/false values within the output of the report. The config file has a few examples of how to use this but the most common are setting the numeric_severity and indicator_of_compromise. \n\nThis way on critical or compromising issues you can fail your toolchain.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstelligent%2Finspector-status","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fstelligent%2Finspector-status","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstelligent%2Finspector-status/lists"}