-
MITRE has developed a set of inspec benchmarks mapped to NIST Controls for GCP - https://github.com/mitre/inspec-gcp-cis-benchmark. There is also https://github.com/devsec profiles, both also have k8s…
-
MITRE has developed a set of inspec benchmarks mapped to NIST Controls for GCP/AWS - none yet for Azure. There is also https://github.com/devsec profiles, no known Azure benchmarks exist there either.…
-
### Describe the bug
Ive been trying to test using this project to Audit and Remediate a test server with VMware ESXi, 8.0.2, 23305546.
When running /vsphere/8.0/v1r1-stig/vsphere/powercli/VMwar…
-
Running build.sh errors on step 7/21 with `fatal: unable to access 'https://gitlab.mitre.org/inspec/inspec_to.git/': Could not resolve host: gitlab.mitre.org`. Slightly further down the stack trace is…
-
-
Here is a list of inconsistencies I found:
1. The table under "Defaults" has a table row that is green/transparent to the background component, but the other table rows are opaque and light gray. Url…
-
This library is getting installed when I npm install @mitre/saf and npm reports there are vulnerabilities to check. When I run npm audit, it reports the following for this lib's fast-xml-parser depend…
-
I know I am repeating myself in various issues on this but I hope this collects a lot of these ideas.
We should also write up a 'HDF Profile and Control' Stype guide that would help lay out a lot …
-
please align to readme template for baselines located at:
https://github.com/mitre/docs-mitre-inspec/blob/master/templates/baseline_readme.md
-
For better parity with the original benchmarks, update these inspec.yml fields in the MITRE SAF STIG inspec pbaselines to mimic the information viewed in STIG Viewer and eMASS:
within the inspec.ym…