dev-sec / cis-docker-benchmark

CIS Docker Benchmark - InSpec Profile
https://dev-sec.io/baselines/docker/
Apache License 2.0
489 stars 114 forks source link

Fix utf8 truncated output #53

Closed aschmidt75 closed 6 years ago

aschmidt75 commented 6 years ago

controls/container_images.rb uses docker history to inspect commands, which truncates tabular output with a UTF-8 dash, which might lead to character encoding issues (https://github.com/dev-sec/cis-docker-benchmark/issues/51).

--no-trunc option to docker history mitigates this while preserving check functionality.