Category:

compliance


Understanding InSpec Profile Inheritance

Engineers sometimes use the phrase DRY – Don’t Repeat Yourself. It’s commonly used when writing or reviewing code that is repetitive. The usual solution is to take the repetitious code and turn it into something that can be reused. It’s really easy to fall into the “repeat yourself” trap, even with a tool like InSpec.

Read more

Chef Automate release – July 2017

Chef Automate is officially one year old as of this latest release (1.5.46). Happy birthday, Chef Automate! There are a number of things to highlight this release. Compliance Views Better insight of compliance state and profile data is now available by default in the Chef Automate GUI.

Read more

Chef Automate Pilot: Try Chef Automate using Docker

Chef is excited to announce a new Learn Chef Rally module that introduces you to Chef Automate. Try the Chef Automate Pilot now or read on to learn what it’s all about.

Read more

Chef DK 2.0 Released

We’re delighted to announce the release of Chef DK 2.0. This release updates many of the tools included in Chef DK, which provides more features and functionality, and adds support for partner integrations. Chef DK 2.0 contains Chef Client 13.2, and is the best way to develop, validate, and deploy Chef cookbooks.

Read more

Announcing Chef Automate Compliance Training Course

How can you ensure that your systems are secure without slowing down your deployments? Use Chef Automate for compliance. Chef Automate compliance is a solution that allows you to assess your infrastructure’s adherence to compliance requirements and to monitor that infrastructure on an ongoing basis.

Read more

InSpec goes networking

Recently we announced the release of InSpec for cloud platforms like AWS, Azure, and VMware. It demonstrates InSpec’s evolution in going from operating systems compliance to platforms and APIs compliance. During the keynote at ChefConf 2017, Christoph Hartmann highlighted another part of this evolution: InSpec’s support for network management APIs.

Read more

Chef Announcements: Lighting the Path from Here to There

Technology shifts, such as the moves toward cloud-native applications and container-first architectures, make it clear that tomorrow will look very different from today. But how to get from here to there? Today Chef announced a host of new product features, partner offerings, and skill-building opportunities that, taken together, light a path for enterprises to follow.

Read more

Compliance automation: Bridging the gap between development & information security

Speed is nothing without control DevOps makes software deployment faster. But without proper controls, that may mean that developers are also releasing security vulnerabilities more quickly. The fast pace of innovation will not be slowing down and the pressure to deliver rapidly keeps increasing.

Read more
Posted in:

InSpec launches support for cloud platform assessments

InSpec Cloud Modules We are proud to announce the release of three new open-source incubation projects to the InSpec community: inspec-aws, inspec-azure, and inspec-vmware. With these projects, InSpec extends its reach into these widely used platforms. You can now use InSpec for cloud native security and integration testing.

Read more

Achieving Windows Compliance with InSpec

This blog post is a follow-up on our Windows Compliance with InSpec webinar by Joe Gardiner, Senior Solutions Architect and Christoph Hartmann, InSpec Creator that was presented live on April 11, 2017. In that webinar, we describe what Continuous Compliance is and we cover assessment with InSpec and remediation with Chef.

Read more

FOLLOW @CHEF

compliance