-
Notifications
You must be signed in to change notification settings - Fork 53
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Added directions for Heimdall Lite (#59)
* added directions to README and Walkthough to create a json result and looad into Heimdall Lite * added default dummy value for the project_id * fixed indent issues in inspec.yml * fixed markdown syntax in README Signed-off-by: Aaron Lippold <[email protected]>
- Loading branch information
1 parent
059e1ff
commit a9134fc
Showing
3 changed files
with
170 additions
and
118 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -13,51 +13,64 @@ | |
| # limitations under the License. | ||
|
|
||
| name: inspec-gcp-cis-benchmark | ||
| title: "Inspec GCP CIS 1.1 Benchmark" | ||
| maintainer: | ||
| copyright: Google | ||
| copyright_email: [email protected] | ||
| license: Apache-2.0 | ||
| title: "InSpec GCP CIS 1.1 Benchmark" | ||
| maintainer: "Google Cloud Platform" | ||
| copyright: "(c) 2020, Google, Inc." | ||
| copyright_email: "[email protected]" | ||
| license: "Apache-2.0" | ||
| summary: "Inspec Google Cloud Platform Center for Internet Security Benchmark v1.1 Profile" | ||
| version: "1.1.0-19" | ||
| version: 1.1.0-19 | ||
|
|
||
| supports: | ||
| - platform: gcp | ||
|
|
||
| depends: | ||
| - name: inspec-gcp-helpers | ||
| url: https://github.com/GoogleCloudPlatform/inspec-gcp-helpers/archive/v1.0.7.tar.gz | ||
| - name: inspec-gcp-helpers | ||
| url: https://github.com/GoogleCloudPlatform/inspec-gcp-helpers/archive/v1.0.7.tar.gz | ||
|
|
||
| inputs: | ||
| - name: gcp_project_id | ||
| description: 'The GCP project identifier.' | ||
| type: string | ||
| value: "replace_with_your_gcp_project_id" | ||
| - name: cis_version | ||
| description: 'The short version of the GCP CIS Benchmark' | ||
| value: '1.0' | ||
| type: string | ||
| - name: cis_url | ||
| description: 'The URL to the GCP CIS Benchmark' | ||
| value: 'https://www.cisecurity.org/benchmark/google_cloud_computing_platform/' | ||
| type: string | ||
| - name: sa_key_older_than_seconds | ||
| description: 'How many seconds SA keys should not be older than' | ||
| value: 7776000 | ||
| type: numeric | ||
| - name: kms_rotation_period_seconds | ||
| description: 'How many seconds KMS Keys should be last rotated (90 days)' | ||
| value: 7776000 | ||
| type: numeric | ||
| - name: bucket_logging_ignore_regex | ||
| description: 'Ignore this bucket by regex from requiring logging to be enabled' | ||
| # {{gcp_project_id}} and {{bucket_logging_ignore_regex}} | ||
| # must be defined at runtime by the user | ||
| - name: gcp_project_id | ||
| description: "The GCP project identifier." | ||
| type: String | ||
| required: true | ||
| value: 'aaa-bbb-ccc-ddd' | ||
|
|
||
| # example = "-logging" | ||
| value: "replace-with-bucket-name-or-partial-match" | ||
| type: string | ||
| - name: gcp_gke_locations | ||
| description: 'The list of regions and/or zone names where GKE clusters are running. An empty array searches all locations' | ||
| type: array | ||
| value: | ||
| - "" | ||
| - name: gce_zones | ||
| description: 'The list of zone names where GCE instances are running. An empty array searches all locations' | ||
| type: array | ||
| value: | ||
| - "" | ||
| # "replace-with-bucket-name-or-partial-match" | ||
| - name: bucket_logging_ignore_regex | ||
| description: "Ignore this bucket by regex from requiring logging to be enabled" | ||
| type: String | ||
| required: false | ||
|
|
||
| - name: cis_version | ||
| description: "The short version of the GCP CIS Benchmark" | ||
| value: "1.0" | ||
| type: String | ||
|
|
||
| - name: cis_url | ||
| description: "The URL to the GCP CIS Benchmark" | ||
| value: "https://www.cisecurity.org/benchmark/google_cloud_computing_platform/" | ||
| type: String | ||
|
|
||
| - name: sa_key_older_than_seconds | ||
| description: "How many seconds SA keys should not be older than" | ||
| value: 7776000 | ||
| type: Numeric | ||
|
|
||
| - name: kms_rotation_period_seconds | ||
| description: "How many seconds KMS Keys should be last rotated (90 days)" | ||
| value: 7776000 | ||
| type: Numeric | ||
|
|
||
| - name: gcp_gke_locations | ||
| description: "The list of regions and/or zone names where GKE clusters are running. An empty array searches all locations" | ||
| type: Array | ||
| value: | ||
| - "" | ||
| - name: gce_zones | ||
| description: "The list of zone names where GCE instances are running. An empty array searches all locations" | ||
| type: Array | ||
| value: | ||
| - "" | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters