Projects in Awesome Lists tagged with inspec

https://github.com/inspec/inspec

InSpec: Auditing and Testing Framework

audit compliance devops devsec inspec security spec tdd tdd-utilities testing

Last synced: 01 Apr 2025

https://github.com/dev-sec/cis-docker-benchmark

CIS Docker Benchmark - InSpec Profile

cis-docker-benchmark docker hardening inspec security

Last synced: 14 Mar 2025

https://github.com/nemonik/hands-on-devops

A hands-on DevOps course covering the culture, methods and repeated practices of modern software development involving Packer, Vagrant, VirtualBox, Ansible, Kubernetes, K3s, MetalLB, Traefik, Docker-Compose, Docker, Taiga, GitLab, Drone CI, SonarQube, Selenium, InSpec, Alpine 3.10, Ubuntu-bionic, CentOS 7...

ansible ansible-automation continuous-delivery continuous-integration devops docker docker-image drone gitlab go hands-on-devops-course inspec kubernetes pipeline plantuml selenium sonarqube taiga vagrant virtual-machine

Last synced: 06 Oct 2025

https://github.com/nemonik/hands-on-DevOps

A hands-on DevOps course covering the culture, methods and repeated practices of modern software development involving Packer, Vagrant, VirtualBox, Ansible, Kubernetes, K3s, MetalLB, Traefik, Docker-Compose, Docker, Taiga, GitLab, Drone CI, SonarQube, Selenium, InSpec, Alpine 3.10, Ubuntu-bionic, CentOS 7...

ansible ansible-automation continuous-delivery continuous-integration devops docker docker-image drone gitlab go hands-on-devops-course inspec kubernetes pipeline plantuml selenium sonarqube taiga vagrant virtual-machine

Last synced: 03 Apr 2025

https://github.com/dev-sec/cis-kubernetes-benchmark

CIS Kubernetes Benchmark - InSpec Profile

inspec

Last synced: 11 May 2025

https://github.com/dev-sec/ssh-baseline

DevSec SSH Baseline - InSpec Profile

audit baseline devsec hacktoberfest hardening inspec security ssh

Last synced: 04 Jul 2025

https://github.com/dev-sec/cis-dil-benchmark

CIS Distribution Independent Linux Benchmark - InSpec Profile

audit baseline devsec hardening inspec linux security

Last synced: 16 May 2025

https://github.com/inspec/inspec-gcp

InSpec GCP (Google Cloud Platform) Resource Pack

gcp inspec

Last synced: 16 May 2025

https://github.com/inspec/inspec-aws

InSpec AWS Resource Pack https://www.inspec.io/

aws inspec

Last synced: 16 May 2025

https://github.com/googlecloudplatform/inspec-gcp-cis-benchmark

GCP CIS 1.1.0 Benchmark InSpec Profile

auditing cis-benchmark cloud compliance gcp inspec security

Last synced: 09 May 2025

https://github.com/gordonmurray/packer_ansible_inspec_terraform_aws

A demo application using Packer, Ansible, InSpec and Terraform on AWS

ansible aws inspec packer terraform

Last synced: 30 Jul 2025

https://github.com/chef/cookstyle

A linting tool that helps you to write better Chef Infra cookbooks and InSpec profiles by detecting and automatically correcting style, syntax, and logic mistakes in your code.

chef chef-infra controls cookbook hacktoberfest inspec linting policy-as-code profile recipes rubocop

Last synced: 25 Jun 2025

https://github.com/mitre/inspec_tools

A command-line and ruby API of utilities, converters and tools for creating, converting and processing security baseline formats, results and data

checklist cis compliance converter disa disa-checklist inspec json mitre-corporation mitre-inspec security stig xccdf

Last synced: 20 Aug 2025

https://github.com/mitre/aws-foundations-cis-baseline

InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark

aws aws-security cis cloud ia inspec inspec-profile mitre-corporation mitre-inspec mitre-saf security

Last synced: 05 Apr 2025

https://github.com/mitre/vulcan

A web application to streamline the development of STIGs from SRGs

compliance compliance-automation disa inspec mitre-corporation mitre-inspec srg stig

Last synced: 06 Apr 2025

https://github.com/chef-boneyard/terraform-provisioner-inspec

Terraform InSpec Provisioner Plugin

inspec terraform terraform-provisioner

Last synced: 01 Sep 2025

https://github.com/dev-sec/ssl-baseline

DevSec SSL/TLS Baseline - InSpec Profile

audit baseline devsec hardening inspec security ssl tls

Last synced: 04 Jul 2025

https://github.com/dev-sec/postgres-baseline

DevSec PostgreSQL Baseline - InSpec Profile

audit baseline devsec hardening inspec postgresql security

Last synced: 04 Jul 2025

https://github.com/dev-sec/windows-patch-baseline

DevSec Windows Patch Baseline - InSpec Profile

audit baseline devsec hardening inspec patch security windows

Last synced: 10 Sep 2025

https://github.com/chef-boneyard/inspec-aws-old

[Deprecated] This is integrated in InSpec 2.0 now

aws inspec

Last synced: 11 Apr 2025

https://github.com/mitre/heimdall_tools

DEPRECATED: A set of utilities for converting and working with compliance data for viewing in the heimdall applications

heimdall heimdall-lite inspec mitre-corporation mitre-heimdall mitre-heimdall-lite

Last synced: 21 Apr 2025

https://github.com/mitre/cis-aws-foundations-hardening

(WIP) A terraform / kitchen-terraform hardening baseline for the cis-aws-foundations-baseline

aws aws-hardening aws-security cis cis-aws-benchmark inspec kitchen-terraform mitre-corporation mitre-inspec test-kitchen wip

Last synced: 06 Jul 2025

https://github.com/simp/inspec-profile-disa_stig-el7

InSpec Profile for the EL7 DISA STIG

disa inspec rhel stig

Last synced: 13 Apr 2025

https://github.com/mitre/ansible-cis-docker-ce-hardening

(WIP) An ansible playbook to harden a docker host to the CIS CE Benchmark requirements

cis docker docker-security inspec mitre-corporation mitre-inspec mitre-saf wip

Last synced: 21 Apr 2025

https://github.com/mitre/nginx-stigready-baseline

STIG Ready Content: InSpec Profile for NGINX Open Source based off the Web SRG V2R3

disa inspec mitre-corporation mitre-saf nginx security srg stig stigs

Last synced: 21 Apr 2025

https://github.com/mitre/heimdall-lite

Heimdall Lite 2.0 is a JavaScript based security results viewer and review tool supporting multiple security results formats, such as: InSpec, SonarQube, OWASP-Zap and Fortify which you can load locally, from S3 and other data sources.

heimdall-lite inspec mitre-corporation mitre-inspec netlify security viewer

Last synced: 21 Apr 2025

https://github.com/chris-rock/testing-4-cloud

Testing for the Cloud

aws inspec provision terraform

Last synced: 15 Apr 2025

https://github.com/chef-boneyard/inspec-vmware

InSpec VMware Resource Pack (Incubation)

esx inspec vmware vsphere

Last synced: 29 Jul 2025

https://github.com/dev-sec/openstack-baseline

Use InSpec to run through the configurations from the OpenStack Security Guide.

inspec

Last synced: 05 Sep 2025

https://github.com/mitre/inspec_training_courses

(WIP) A set of training material and guides for using inspec

inspec mitre-corporation mitre-institute training

Last synced: 21 Apr 2025

https://github.com/stackstorm/packer-st2

Packer templates for building & deploying Vagrant & OVA with StackStorm installed

inspec ova packer-template st2 stackstorm vagrant vagrant-boxes virtual-appliance virtualbox

Last synced: 29 Jun 2025

https://github.com/mitre/microsoft-windows-10-stig-baseline

InSpec profile for Microsoft Windows 10, against DISA's Microsoft Windows 10 Security Technical Implementation Guide (STIG) Version 1, Release 19

inspec mitre-corporation mitre-inspec stig vmware windows-10

Last synced: 19 Jul 2025

https://github.com/mitre/aws-s3-baseline

A micro InSpec baseline to check for insecure or public s3 buckets in your VPC

aws aws-s3-security aws-security inspec microprofile mitre-corporation mitre-inspec mitre-saf s3 s3-bucket s3-bucket-leak s3-security security

Last synced: 29 Jul 2025

https://github.com/centriascolocation/inspec-aws-baseline

InSpec AWS Baseline Profile

aws baseline bestpractice inspec security

Last synced: 11 Jul 2025

https://github.com/mitre/microsoft-windows-server-2016-stig-baseline

An InSpec Profile for evaluating a Windows 2016 server to the DISA STIGs

disa inspec mitre-corporation stig windows-2016

Last synced: 20 Aug 2025

https://github.com/ferrarimarco/cookiecutter-ansible-role

Cookiecutter recipe to easily create ansible roles.

ansible ansible-galaxy ansible-roles cookiecutter inspec test-kitchen test-kitchen-ansible test-kitchen-docker

Last synced: 05 Oct 2025

https://github.com/mitre/canonical-ubuntu-16.04-lts-stig-baseline

InSpec profile to validate the secure configuration of Canonical Ubuntu 16.04 LTS against DISA's Canonical Ubuntu 16.04 LTS Security Technical Implementation Guide (STIG) Version 1 Release 1.

baseline difz disa inspec mitre-corporation mitre-inspec mitre-saf stig ubuntu ubuntu1604

Last synced: 21 Apr 2025

https://github.com/lreimer/clean-infrastructure-as-code

Repository with code and demos for my talk "Clean Infrastructure as Code"

clean-architecture clean-code container-structure-test devops docker infrastructure infrastructure-as-code inspec kubernetes snyk terraform terragrunt terratest testing tflint trivy

Last synced: 08 Jul 2025

https://github.com/vibrato/inspec-meltdownspectre

Inspec profile to test for the presence of the Meltdown/Spectre vulnerabilities

devsecops inspec meltdown spectre

Last synced: 13 Jul 2025

https://github.com/shinesolutions/inspec-aem-security

InSpec profile for compliance with AEM security checklist

aem aem-opencloud inspec security-guideline testing

Last synced: 13 Apr 2025

https://github.com/hashicorp/packer-plugin-inspec

This Packer provisioner has been archived due to it no longer being maintained. Users are encouraged to use the shell or shell-local provisioner to run the provisioning tools made available by this plugin. If interested in maintaining this plugin please reach out to us at packer@hashicorp.com.

inspec packer packer-plugin

Last synced: 01 Oct 2025

https://github.com/mitre/eks-cis-cluster-baseline

This profile implements the CIS Amazon Elastic Kubernetes Service (EKS) Benchmark version 1.0.1 (Cluster requirements).

aws eks eks-cluster inspec mitre-corporation mitre-saf

Last synced: 26 Jun 2025

https://github.com/mitre/rsa-archer-6-security-configuration-guide-baseline

Inspec profile to validate security settings of Archer to the RSA Archer Security Guidance

archer inspec inspec-profile mitre-corporation mitre-inspec rsa-archer rsa-archer-security security-automation

Last synced: 12 Sep 2025

https://github.com/mitre/apache-tomcat-8-cis-baseline

(WIP) (Alpha) InSpec profile for CIS Apache Tomcat v8 Benchmark

apache inspec inspec-profile mitre-corporation mitre-inspec mitre-saf security tomcat

Last synced: 21 Apr 2025

https://github.com/mitre/ansible-cis-tomcat-hardening

WIP Ansible playbook for hardening a tomcat instance to the CIS Tomcat Benchmark v1.0.1

cis inspec mitre-corporation mitre-inspec mitre-saf tomcat tomcat-security

Last synced: 23 Feb 2025

https://github.com/mitre/inspecjs

MIGRATED: A Typescript Library for working with InSpec data

inspec javascript mitre-corporation mitre-inspec vuejs

Last synced: 21 Apr 2025

https://github.com/mitre/compliance-mapper

(WIP) (ALPHA) Compliance Mapper is a web-based rest-api and application for information assurance control mapping

compliance compliance-as-code compliance-service inspec mitre-corporation mitre-inspec

Last synced: 21 Apr 2025

https://github.com/mitre/redhat-enterprise-linux-6-stig-baseline

InSpec profile to validate the secure configuration of Red Hat Enterprise Linux 6, against DISA's Red Hat Enterprise Linux 6 Security Technical Implementation Guide (STIG) Version 1, Release 21.

disa inspec inspec-profile mitre-inspec rhel6 stig stig-compliant

Last synced: 11 Jul 2025

https://github.com/melezhik/bird

Bird - Alternative to Chef Inspec and Goss, written in Raku.

goss inspec raku sparrow6 testinfra

Last synced: 20 Mar 2025

https://github.com/alexpop/inspec-ssl-certificate

InSpec profile providing an ssl_certificate resource and sample controls

inspec

Last synced: 10 Oct 2025

https://github.com/mitre/docker-ce-cis-baseline

CIS Docker Community Edition Benchmark InSpec Profile

docker docker-ce inspec inspec-profile mitre-corporation mitre-inspec

Last synced: 12 Oct 2025

https://github.com/glytching/terraform-gcp-storage-bucket

A Terraform module for creating and managing GCS buckets

gcp gcp-storage gcs hcl inspec terraform terraform-module terraform-modules

Last synced: 27 Oct 2025

https://github.com/mitre/oracle-database-19c-cis-baseline

InSpec testing for baseline compliance with the Oracle 19c CIS Benchmark

inspec mitre-corporation mitre-saf security-automation

Last synced: 21 Apr 2025

https://github.com/mitre/microsoft-iis-8.5-site-stig-baseline

Inspec Profile to validate MS IIS 8.5 to the DISA STIG

baseline disa inspec mitre-corporation stig

Last synced: 21 Apr 2025

https://github.com/mitre/microsoft-iis-8.5-server-stig-baseline

InSpec profile to validate an MS IIS Server to the DISA STIG

disa iis-server inspec microsoft mitre-corporation stig

Last synced: 10 Oct 2025

https://github.com/mitre/microsoft-sql-server-2014-instance-stig-baseline

Inspec Profile to validate MSSQL 2014

disa inspec mitre-corporation mssql-2014 mssqlserver security stig

Last synced: 30 Oct 2025

https://github.com/jugatsu/ansible-role-pritunl-server

Ansible Role for Pritunl Server (https://pritunl.com)

ansible ansible-role inspec molecule pritunl vpn-server

Last synced: 07 Apr 2025

https://github.com/newcontext-oss/terraform-google-instance

Terraform module which creates a Google compute instance within the default networking of an existing project

gcp google hashicorp inspec kitchen-terraform newcontext-oss terraform test-kitchen

Last synced: 14 Aug 2025

https://github.com/jjasghar/inspec-vmware-example

An example InSpec profile to run a control to validate TSM-SSH against ESXi

chef demo inspec powercli powershell

Last synced: 01 Nov 2025

https://github.com/mitre/inspec-assessor

The MITRE InSpec Team's introduction to InSpec Execution

inspec inspec-assessors mitre mitre-saf mitre-saf-training

Last synced: 23 Feb 2025

https://github.com/lreimer/iac-testing

Demo repository for Infrastructure as Code testing tools and frameworks.

container-structure-test docker inspec kubernetes terraform terratest

Last synced: 08 Jul 2025

https://github.com/f5devcentral/big-ip-atc-ready

Inspec profile to validate the readiness of the BIG-IP Automation Toolchain (ATC)

devops f5-bigip inspec test-automation testing

Last synced: 11 Apr 2025

https://github.com/mitre/chef-stig-windows-server-2016-v1r4-hardening

(WIP) chef recipe to harden a Windows 2016 server to the DISA STIGs

chef hardening inspec mitre-corporation security windows windows-2016

Last synced: 12 Jul 2025

https://github.com/mitre/oracle-java-runtime-environment-8-unix-stig-baseline

Inspec Profile for the JRE 8 STIG

inspec jre mitre-corporation mitre-inspec stig

Last synced: 21 Apr 2025

https://github.com/mitre/mongodb-enterprise-advanced-3-stig-baseline

InSpec profile for the MongoDB Enterprise Advanced DISA STIG

disa disa-stig inspec inspec-profile mitre-corporation mongodb-enterprise profile stig

Last synced: 21 Apr 2025

https://github.com/mitre/oracle-database-12c-stig-baseline

InSpec profile for the Oracle Database 12c DISA STIG

disa disa-stig inspec inspec-profile mitre-corporation oracle-database profile stig

Last synced: 21 Apr 2025

https://github.com/ahelal/cf-inspec

inSpec resources for Cloudfoundry, Opsman and Bosh

bosh cloudfoundry inspec opsman opsmanager pcf testing

Last synced: 10 Apr 2025

https://github.com/mitre/microsoft-sql-server-2014-database-stig-baseline

Inspec Profile to validate MSSQL Database 2014

inspec mitre-corporation mssql mssql-2014 stig

Last synced: 21 Apr 2025

https://github.com/mitre/docs-mitre-inspec

Documentation, templates and other useful tidbits for developing and maintaining code with the MITRE InSpec Team

inspec inspec-docs mitre-corporation mitre-inspec

Last synced: 11 Apr 2025

https://github.com/mitre/microsoft-windows-2012r2-memberserver-stig-baseline

InSpec profile for the Windows 2012r2 Memberserver DISA STIG

disa inspec mitre-corporation stig windows windows2012

Last synced: 21 Apr 2025

https://github.com/darkwizard242/ansible-role-inspec

Ansible role for InSpec. Available on Ansible Galaxy.

ansible ansible-galaxy ansible-role audit infrastructure-testing inspec security system

Last synced: 16 Mar 2025

https://github.com/mitre/k8s-node-stig-baseline

InSpec profile for scanning k8s nodes against the k8s STIG

inspec kubernetes mitre-corporation mitre-saf security-automation

Last synced: 16 Apr 2025

https://github.com/mitre/demo-aws-hardening

DEMO: A kitchen-terraform based example of building and validating AWS security settings

aws inspec mitre-corporation mitre-inspec s3-buckets s3-security vpc vpc-security

Last synced: 26 Oct 2025

https://github.com/alexpop/ec2-instance-profile

A library InSpec compliance profile containing a custom `ec2_instance` resource that can be used to test `meta-data` and `user-data` for AWS EC2 nodes.

inspec

Last synced: 14 May 2025

https://github.com/mitre/heimdall-lite-1.0

A single page java-script implementation of the MITRE Heimdall InSpec results viewer

heimdall-lite inspec json mitre-corporation mitre-inspec reporting results stig

Last synced: 21 Apr 2025

https://github.com/shinesolutions/inspec-aem-aws

InSpec profile for checking AEM resources on AWS

aem aem-opencloud aws inspec testing

Last synced: 06 Sep 2025

https://github.com/jjasghar/vcenter-packer-ansible-inspec

A demo pipeline to work with vCenter Packer Ansible and InSpec

ansible devops inspec jenkins packer vcenter

Last synced: 01 Nov 2025

https://github.com/mitre/apache-tomcat-7-cis-baseline

(WIP) (ALPHA) InSpec Profile for the CIS Apache Tomcat v7 Benchmark

inspec inspec-profile mitre-corporation mitre-inspec mitre-saf security tomcat tomcat7

Last synced: 21 Apr 2025

https://github.com/mitre/inspec-scanning-integration-gitlab

Sample templates for Gitlab CI/CD pipelines for testing InSpec profiles.

gitlab gitlab-ci inspec mitre-corporation mitre-saf pipelines security-automation-framework

Last synced: 20 Sep 2025

https://github.com/mitre/oracle-mysql-8-stig-baseline

InSpec profile for automated STIG compliance testing of Oracle MySQL 8.0

inspec mitre-corporation mitre-saf security-automation

Last synced: 21 Apr 2025

https://github.com/rrey/terraform-runner

A docker container to use as a CI runner with awesome tools around Terraform

cicd-pipeline conftest gitlab-runners iac inspec kitchen-terraform openpolicyagent terraform terragrunt test-automation

Last synced: 01 Apr 2025

https://github.com/mitre/oracle-mysql-ee-5.7-cis-baseline

InSpec profile to validate the secure configuration of Oracle MySQL Enterprise Edition version 5.7, against CIS's Oracle MySQL Enterprise Edition 5.7 CIS Benchmark.

baseline cis inspec mitre-corporation mitre-inspec mysql wip

Last synced: 21 Apr 2025

https://github.com/mitre/inspec_install_guide

A small install guide for installing inspec

inspec inspec-installer install mitre-corporation mitre-inspec

Last synced: 23 Feb 2025

https://github.com/mitre/solaris-11-x86-stig-baseline

inspec lockheed-martin mitre-corporation mitre-saf

Last synced: 23 Jul 2025

https://github.com/mitre/chef-iis-85-hardening

WIP Chef Recipe to harden a Windows IIS server v8.5 to the DISA STIG requirements

inspec mitre-corporation mitre-inspec mitre-saf ms-iis-server windows windows-iis

Last synced: 02 Aug 2025

https://github.com/mitre/inspec-profile-developer-course-lab-environment

The InSpec Profile Developer Lab is a GitHub Codespaces environment that makes it quick and easy for you to start learning and working on your own InSpec profiles.

chef-inspec cinc cinc-auditor inspec mitre-corporation mitre-inspec mitre-saf

Last synced: 04 Oct 2025

https://github.com/mitre/helloworld-web-functional-baseline

DEMO: This InSpec profile provides a minimal - however incomplete - example to include functional testing for a the helloworld-web docker application.

hands-on-devops inspec mitre-corporation mitre-inspec

Last synced: 23 Feb 2025

https://github.com/mitre/aws-rds-microsoft-sql-server-2014-instance-stig-baseline

InSpec profile to validate the secure configuration of AWS RDS Microsoft SQL Server 2014, against DISA's Microsoft SQL Server 2014 Instance Security Technical Implementation Guide (STIG) Version 1, Release 9.

inspec microsoft mitre-corporation mitre-inspec mitre-saf sql stig

Last synced: 30 Oct 2025

https://github.com/mitre/chef-cis-tomcat-hardening

(WIP) Chef recipe for hardening tomcat 8 to the CIS Tomcat Benchmark v1.0.1

chef hardening inspec mitre-corporation mitre-inspec mitre-saf security test-kitchen tomcat8

Last synced: 23 Feb 2025

https://github.com/mitre/redhat-enterprise-linux-9-stig-baseline

RHEL 9.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of RHEL9.

inspec mitre mitre-saf redhat redhat9 validation

Last synced: 23 Mar 2025

https://github.com/mitre/inspec-advanced-developer

THIS CONTENT HAS BEEN MIGRATED TO https://github.com/mitre/saf-training.

inspec mitre mitre-corporation mitre-saf mitre-saf-training

Last synced: 21 Apr 2025

https://github.com/mitre/redhat-jboss-enterprise-application-platform-6.3-stig-baseline

Inspec Profile for the Wildfly (JBOSS) stig

baseline inspec mitre-corporation mitre-inspec profile stig wildfly

Last synced: 11 Apr 2025

https://github.com/mitre/chef-iis-site-hardening

WIP Chef recipe to harden a windows iis site or sites to the DISA STIG requirements

disa hardening inspec mitre-corporation mitre-inspec mitre-saf security stig

Last synced: 12 Jul 2025

https://github.com/mitre/demo-aws-baseline

Example: AWS InSpec profile for validation of AWS infrastructure

aws inspec mitre-corporation mitre-inspec s3-security security vpc vpc-security

Last synced: 23 Feb 2025

https://github.com/jasonwalsh/image-template-repository

GitHub template repository for scaffolding Packer and Kitchen projects

amazon-machine-image compliance inspec kitchen-ec2 packer

Last synced: 06 Apr 2025

https://github.com/multani/inspec-custom-resources

A set of custom resources for InSpec (libraries + associated controls)

consul inspec

Last synced: 02 Jan 2026

https://github.com/mitre/helloworld-web-baseline

DEMO: This InSpec profile provides a minimal - however incomplete - example to include functional and security testing for a the helloworld-web docker application.

hands-on-devops inspec mitre-corporation mitre-inspec

Last synced: 23 Feb 2025