Unlock 30% off on Manual Testing Annual Plans this Holiday Season.

Copied to Clipboard!

How to use desc method of Inspec Package

Best Inspec_ruby code snippet using Inspec.desc

cli_command.rb

Source:cli_command.rb

...6require "inspec-iggy/terraform/negative"7module InspecPlugins::Iggy8  module Terraform9    class CliCommand < Inspec.plugin(2, :cli_command)10      subcommand_desc "terraform SUBCOMMAND ...", "Generate an InSpec profile from Terraform"11      class_option :debug,12                   desc: "Verbose debugging messages",13                   type: :boolean,14                   default: false15      class_option :copyright,16                   desc: "Name of the copyright holder",17                   default: "The Authors"18      class_option :email,19                   desc: "Email address of the author",20                   default: "you@example.com"21      class_option :license,22                   desc: "License for the profile",23                   default: "Apache-2.0"24      class_option :maintainer,25                   desc: "Name of the copyright holder",26                   default: "The Authors"27      class_option :summary,28                   desc: "One line summary for the profile",29                   default: "An InSpec Compliance Profile"30      class_option :title,31                   desc: "Human-readable name for the profile",32                   default: "InSpec Profile"33      class_option :version,34                   desc: "Specify the profile version",35                   default: "0.1.0"36      class_option :overwrite,37                   desc: "Overwrites existing profile directory",38                   type: :boolean,39                   default: false40      class_option :name,41                   aliases: "-n",42                   required: true,43                   desc: "Name of profile to be generated"44      class_option :tfstate,45                   aliases: "-t",46                   desc: "Specify path to the input terraform.tfstate",47                   default: "terraform.tfstate"48      class_option :platform,49                   required: true,50                   desc: "The InSpec platform providing the necessary resources (aws, azure, or gcp)"51      class_option :resourcepath,52                   required: true,53                   desc: "Specify path to the InSpec Resource Pack providing the necessary resources"54      desc "generate [options]", "Generate InSpec compliance controls from terraform.tfstate"55      def generate56        Inspec::Log.level = :debug if options[:debug]57        platform = options[:platform]58        resource_path = options[:resourcepath]59        # require validation that if platform or resourcepath are passed, both are available60        if platform || resource_path61          unless platform && resource_path62            error "You must pass both --platform and --resourcepath if using either"63            exit(1)64          end65        end66        generated_controls = InspecPlugins::Iggy::Terraform::Generate.parse_generate(options[:tfstate], resource_path, platform)67        printable_controls = InspecPlugins::Iggy::InspecHelper.tf_controls(options[:title], generated_controls, platform)68        InspecPlugins::Iggy::ProfileHelper.render_profile(ui, options, options[:tfstate], printable_controls, platform)69        exit 070      end71      desc "negative [options]", "Generate negative InSpec compliance controls from terraform.tfstate"72      def negative73        Inspec::Log.level = :debug if options[:debug]74        platform = options[:platform]75        resource_path = options[:resourcepath]76        # require validation that if platform or resourcepath are passed, both are available77        if platform || resource_path78          unless platform && resource_path79            error "You must pass both --platform and --resourcepath if using either"80            exit(1)81          end82        end83        negative_controls = InspecPlugins::Iggy::Terraform::Negative.parse_negative(options[:tfstate], resource_path, platform)84        printable_controls = InspecPlugins::Iggy::InspecHelper.tf_controls(options[:title], negative_controls, platform)85        InspecPlugins::Iggy::ProfileHelper.render_profile(ui, options, options[:tfstate], printable_controls, platform)...

Rakefile

Source:Rakefile

1require 'rake'2namespace :inspec do3  desc "Run Inspec tests"4  task :default do5    sh 'inspec exec spec/common_spec.rb'6  end7  desc "Run first ansible Inspec tests"8  task :first do9    sh 'inspec exec spec/ansible_build_spec.rb'10  end11  desc "Run second ansible Inspec tests"12  task :second do13    sh 'inspec exec spec/ansible_second_build_spec.rb'14  end15end16namespace :ansible do17  desc "syntax check"18  task :syntax do19    sh 'ansible-playbook main.yml --syntax-check'20  end21  desc "build check"22  task :check do23    sh 'ansible-playbook main.yml -vv --check'24  end25  desc "build"26  task :build do27    sh 'ansible-playbook main.yml'28  end29  desc "install requirements from galaxy"30  task :install do31    sh 'ansible-galaxy install -r requirements.yml'32    sh 'ansible-galaxy list'33  end34end35namespace :ci do36  desc "Run CI test"37  task :default do38    Rake::Task["ansible:build"].invoke()39    Rake::Task["inspec:default"].invoke()40    Rake::Task["inspec:second"].invoke()41  end42end...

desc

Using AI Code Generation

1describe file('/tmp') do2  it { should be_directory }3describe file('/tmp') do4  it { should be_directory }5describe file('/tmp') do6  it { should be_directory }7describe file('/tmp') do8  it { should be_directory }9describe file('/tmp') do10  it { should be_directory }11describe file('/tmp') do12  it { should be_directory }13describe file('/tmp') do14  it { should be_directory }15describe file('/tmp') do16  it { should be_directory }17describe file('/tmp') do18  it { should be_directory }19describe file('/tmp') do20  it { should be_directory }21describe file('/tmp') do22  it { should be_directory }23describe file('/tmp') do24  it { should be_directory }25describe file('/tmp') do26  it { should be_directory }27describe file('/tmp') do28  it { should be_directory }29describe file('/tmp') do30  it { should be_directory }

desc

Using AI Code Generation

1  describe file("/etc/passwd") do2    it { should exist }3    it { should be_file }4    it { should be_owned_by 'root' }5    it { should be_grouped_into 'root' }6    it { should be_readable.by('others') }7    it { should_not be_readable.by('group') }8    it { should_not be_readable.by('owner') }9    it { should_not be_executable.by('others') }10    it { should_not be_executable.by('group') }11    it { should_not be_executable.by('owner') }12    it { should_not be_writable.by('others') }13    it { should_not be_writable.by('group') }14    it { should_not be_writable.by('owner') }15  describe file("/etc/passwd") do16    it { should exist }17  describe file("/etc/shadow") do18    it { should exist }19  describe file("/etc/group") do20    it { should exist }21  describe file("/etc/gshadow") do22    it { should exist }23  describe file("/etc/passwd") do24    it { should be

desc

Using AI Code Generation

1describe file('/etc/passwd') do2  it { should exist }3describe file('/etc/passwd') do4  it { should exist }5describe file('/etc/passwd') do6  it { should exist }7describe file('/etc/passwd') do8  it { should exist }9describe file('/etc/passwd') do10  it { should exist }11describe file('/etc/passwd') do12  it { should exist }13describe file('/etc/passwd') do14  it { should exist }15describe file('/etc/passwd') do16  it { should exist }17describe file('/etc/passwd') do18  it { should exist }19describe file('/etc/passwd') do20  it { should exist }21describe file('/etc/passwd') do22  it { should exist }23describe file('/etc/passwd') do24  it { should exist }

desc

Using AI Code Generation

1  title '1.1.1 Ensure mounting of cramfs filesystems is disabled (Scored)'2  describe kernel_module('cramfs') do3    it { should_not be_loaded }4  title '1.1.2 Ensure mounting of freevxfs filesystems is disabled (Scored)'5  describe kernel_module('freevxfs') do6    it { should_not be_loaded }7  title '1.1.3 Ensure mounting of jffs2 filesystems is disabled (Scored)'8  describe kernel_module('jffs2') do9    it { should_not be_loaded }10  title '1.1.4 Ensure mounting of hfs filesystems is disabled (Scored)'11  desc 'The hfs filesystem type is a Hierarchical File System (HFS) filesystem. The hfs filesystem type is not signed and has been proven to

desc

Using AI Code Generation

1describe file('/etc/passwd') do2  its('content') { should match(/root:x:0:0/) }3describe file('/etc/passwd') do4  it { should exist }5  its('content') { should match(/root:x:0:0/) }6describe file('/etc/passwd') do7  it { should exist }8  its('content') { should match(/root:x:0:0/) }9describe file('/etc/passwd') do10  it { should exist }11  its('content') { should match(/root:x:0:6/) }12describe file('/etc/passwd') do13  it { should exist }14  its('content') { should match(/root:x:0:0/) }15describe file('/etc/passwd') do16  it { should exist }17  its('content') { should match(/root:x:0:0/) }18describe file('/etc/passwd') do19  it { should exist }20  its('content') { should match(/root:x:0:0/) }21describe file('/etc/passwd') do22  it { should exist }23  its('content') { should match(/root:x:0:0/) }

desc

Using AI Code Generation

1  title '1.1 Ensure a separate partition for containers has been created (Scored)'2  describe file('/') do3    it { should be_directory }4  title '2.1 Ensure the Docker socket file ownership is set to root:docker (Scored)'5  describe file('/') do6    it { should be_directory }7  title '3.1 Ensure that the container host has been Hardened (Not Scored)'8  describe file('/') do9    it { should be_directory }10  title '4.1 Ensure Content trust for Docker is Enabled (Not Scored)'11  describe file('/') do12    it { should be_directory }13  title '5.1 Ensure only approved users are allowed to control Docker daemon (Not Scored)'14  describe file('/') do15    it { should be_directory }16  title '6.1 Ensure operations on legacy registry (v1) are Disabled (Scored)'17  describe file('/') do18    it { should be_directory }

desc

Using AI Code Generation

1    it { should eq 'redhat' }2    it { should eq 'redhat' }3    it { should eq 'redhat' }4    it { should eq 'redhat' }5    it { should eq 'redhat' }6    it { should eq 'redhat' }7    it { should eq 'redhat' }

desc

Using AI Code Generation

1describe file('/tmp') do2  it { should be_directory }3describe file('/tmp') do4  it { should be_directory }5describe file('/tmp') do6  it { should be_directory }7describe file('/tmp') do8  it { should be_directory }9describe file('/tmp') do10  it { should be_directory }11describe file('/tmp') do12  it { should be_directory }13describe file('/tmp') do14  it { should be_directory }15describe file('/tmp') do16  it { should be_directory }17describe file('/tmp') do18  it { should be_directory }19describe file('/tmp') do20  it { should be_directory }21describe file('/tmp') do22  it { should be_directory }23describe file('/tmp') do24  it { should be_directory }25describe file('/tmp') do26  it { should be_directory }27describe file('/tmp') do28  it { should be_directory }29describe file('/tmp') do30  it { should be_directory }

desc

Using AI Code Generation

1describe file('/etc/passwd') do2  it { should exist }3describe file('/etc/passwd') do4  it { should exist }5describe file('/etc/passwd') do6  it { should exist }7describe file('/etc/passwd') do8  it { should exist }9describe file('/etc/passwd') do10  it { should exist }11describe file('/etc/passwd') do12  it { should exist }13describe file('/etc/passwd') do14  it { should exist }15describe file('/etc/passwd') do16  it { should exist }17describe file('/etc/passwd') do18  it { should exist }19describe file('/etc/passwd') do20  it { should exist }21describe file('/etc/passwd') do22  it { should exist }23describe file('/etc/passwd') do24  it { should exist }

desc

Using AI Code Generation

1  title '1.1.1 Ensure mounting of cramfs filesystems is disabled (Scored)'2  describe kernel_module('cramfs') do3    it { should_not be_loaded }4  title '1.1.2 Ensure mounting of freevxfs filesystems is disabled (Scored)'5  describe kernel_module('freevxfs') do6    it { should_not be_loaded }7  title '1.1.3 Ensure mounting of jffs2 filesystems is disabled (Scored)'8  describe kernel_module('jffs2') do9    it { should_not be_loaded }10  title '1.1.4 Ensure mounting of hfs filesystems is disabled (Scored)'11  desc 'The hfs filesystem type is a Hierarchical File System (HFS) filesystem. The hfs filesystem type is not signed and has been proven to

desc

Using AI Code Generation

1describe file('/etc/passwd') do2  its('content') { should match(/root:x:0:0/) }3describe file('/etc/passwd') do4  it { should exist }5  its('content') { should match(/root:x:0:0/) }6describe file('/etc/passwd') do7  it { should exist }8  its('content') { should match(/root:x:0:0/) }9describe file('/etc/passwd') do10  it { should exist }11  its('content') { should match(/root:x:0:0/) }12describe file('/etc/passwd') do13  it { should exist }14  its('content') { should match(/root:x:0:0/) }15describe file('/etc/passwd') do16  it { should exist }17  its('content') { should match(/root:x:0:0/) }18describe file('/etc/passwd') do19  it { should exist }20  its('content') { should match(/root:x:0:0/) }21describe file('/etc/passwd') do22  it { should exist }23  its('content') { should match(/root:x:0:0/) }

desc

Using AI Code Generation

1  title '1.1 Ensure a separate partition for containers has been created (Scored)'2  describe file('/') do3    it { should be_directory }4  title '2.1 Ensure the Docker socket file ownership is set to root:docker (Scored)'5  describe file('/') do6    it { should be_directory }7  title '3.1 Ensure that the container host has been Hardened (Not Scored)'8  describe file('/') do9    it { should be_directory }10  title '4.1 Ensure Content trust for Docker is Enabled (Not Scored)'11  describe file('/') do12    it { should be_directory }13  title '5.1 Ensure only approved users are allowed to control Docker daemon (Not Scored)'14  describe file('/') do15    it { should be_directory }16  title '6.1 Ensure operations on legacy registry (v1) are Disabled (Scored)'17  describe file('/') do18    it { should be_directory }

desc

Using AI Code Generation

1    it { should eq 'redhat' }2    it { should eq 'redhat' }3    it { should eq 'redhat' }4    it { should eq 'redhat' }5    it { should eq 'redhat' }6    it { should eq 'redhat' }7    it { should eq 'redhat' }

Automation Testing Tutorials

Learn to execute automation testing from scratch with LambdaTest Learning Hub. Right from setting up the prerequisites to run your first automation test, to following best practices and diving deeper into advanced test scenarios. LambdaTest Learning Hubs compile a list of step-by-step guides to help you be proficient with different test automation frameworks i.e. Selenium, Cypress, TestNG etc.