Update check ID and add check groups for CIS Controls v8 (v1.6.0 - 06-14-2023)

docker / docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

Apache License 2.0

9.17k stars 1.02k forks source link

Update check ID and add check groups for CIS Controls v8 (v1.6.0 - 06-14-2023) #546

Closed martipoe closed 11 months ago

martipoe commented 11 months ago

Changes:

In the CIS Benchmark v1.6.0 from 06-14-2023, the check "Ensure swarm mode is not Enabled, if not needed" is listed in chapter "5 Container Runtime Configuration" with ID 5.1 (previously 7.1).
Added check groups for CIS Controls v8 IG1-3 mapped recommendations

konstruktoid commented 11 months ago

Thanks @martipoe! I've been holding out on these changes since I reported the 7.1 move as an bug 2 months ago (https://workbench.cisecurity.org/tickets/19871), but without any reply your PR seems totally fine.