Dear Compliance & InSpec friends,
Chef Compliance 1.7.3 is now available from the Chef downloads site. This is a minor release update which is recommended for all users of Chef Compliance. Here are the enhancements and bug fixes included in this release:
Enhancements:
- Ability to upload meta-profiles
- Includes InSpec 1.7.1 with improvements and fixes named below.
Fixed bugs:
- Unable to install compliance on server with enabled LDAP
- Fix compliancestatus calculator when multiple profiles are used
Upgrade instructions for Chef Compliance are found here. Download is available at Chef Compliance downloads page
InSpec 1.7.1
Enhancements:
- run test on remote host using SSH agent private key authentication:
inspec exec test.rb -t ssh://user@hostname - Show process name during inspec output #1329
- Vendor profile when uploading to chef-compliance #1334
- inspec check and json to use vendored dependencies #1321
Fixed bugs:
- RegExp in processes resource can’t match long-run process #1332
- inspec.lock not loaded from tarball profiles #1322
Further details are available in our full InSpec changelog. Download is available at InSpec downloads page
Compliance DemoDay
Compliance DemoDay December 2nd 2016 from Chef on Vimeo.
Integration with Chef Automate
With Chef Automate 0.6.6 we shipped a new compliance profile store as part of the Automate package. More information about Chef Automate Compliance backend is available here:
- https://docs.chef.io/install_chef_automate.html#profiles
- https://github.com/chef/chef-server/blob/12.11.1/RELEASE_NOTES.md
- https://github.com/chef-cookbooks/audit#reporting-to-chef-automate-chef-visibility-via-chef-server
Alex and Chris