Chef capabilities for network compliance

hii,
I have a few questions about using chef for network compliance.

  1. when a deviation is found , can I fix it using chef tools (inspec \ automate ) ? if so - which one?
  2. where can I find examples for chef capabilities (except the documentation)