inspec.yml File
The inspec.yml metadata file describes a profile. This file is required.
Parameters
The inspec.yml file defines the following information:
name- A unique name for the profile.
Required
title- A human-readable name for the profile.
Optional
maintainer- The profile maintainer.
Optional
copyright- The copyright holder.
Optional
copyright_email- The support contact information for the profile, typically an email address.
Optional
license- The license for the profile.
Optional
summary- A one line summary for the profile.
Optional
description- A multiple line description of the profile.
Optional
version- The profile version.
Optional
inspec_version- The SemVer version of Chef InSpec that the profile can run under.
Optional
supports- A list of supported platform targets.
Optional
depends- A list of profile dependencies.
Optional
inputs- A list of inputs you can use in your controls.
Optional
gem_dependencies- A list of profile gem dependencies that must be installed for the profile to function correctly.
Optional
Example
name: ssh
title: Basic SSH
maintainer: Chef Software, Inc.
copyright: Chef Software, Inc.
copyright_email: support@chef.io
license: Proprietary, All rights reserved
summary: Verify that SSH Server and SSH Client are configured securely
version: 1.0.0
supports:
- platform-family: linux
inputs:
- name: input_name
required: true
description: 'Input description.'
value: 10
priority: 50
depends:
- name: profile
path: ../path/to/profile
gem_dependencies:
- name: "gem-name"
version: ">= 2.0.0"
inspec_version: "~> 2.1"
Embedded ERB
The inspec.yml also supports embedded ERB.
name: dummy
title: InSpec Profile
maintainer: The Authors
copyright: The Authors
copyright_email: you@example.com
license: Apache-2.0
summary: An InSpec Compliance Profile
version: 0.1.0
depends:
- name: inherit
url: "https://artifactory.com/artifactory/example-repo-local/inspec/0.4.1.tar.gz"
username: <%= ENV['USERNAME'] %>
password: <%= ENV['API_KEY'] %>