About kitchen-inspec

[edit on GitHub]

Use Chef InSpec as a Kitchen verifier with kitchen-inspec.

Add the Chef InSpec verifier to the .kitchen.yml file:

verifier:
  name: inspec

Use a compliance profile from the Chef Compliance server:

suites:
  - name: compliance
    run_list:
      - recipe[ssh-hardening::default]
    verifier:
      inspec_tests:
        - compliance://base/ssh

and then run the following command:

inspec automate login https://compliance.test --user admin --insecure --token ''

where --insecure is required when using self-signed certificates.

inspec compliance is a backwards compatible alias for inspec automate and works the same way:

inspec compliance login https://compliance.test --user admin --insecure --token ''

Use a compliance profile from the Chef Supermarket:

suites:
  - name: supermarket
    run_list:
      - recipe[ssh-hardening::default]
    verifier:
      inspec_tests:
        - supermarket://dev-sec/ssh-baseline

Use Chef InSpec tests from the local file system:

suites:
  - name: local
    run_list:
      - recipe[my_cookbook::default]
    verifier:
      inspec_tests:
        - test/integration/default

Check out Detect and correct with Test Kitchen on Learn Chef Rally for a hands-on look at how to use Test Kitchen to run Chef InSpec profiles.