Release notes: Chef InSpec 5.21.29

New Features

  • Added the --enhanced-outcomes option to the InSpec CLI. (#6145)
  • Added support for waiver files in CSV and JSON file formats. (#6369)
  • Added new Podman resources for testing containers, images, pods, volumes, and networks. (#6183)
  • Added the only_applicable_if keyword to the InSpec DSL. This allows you to mark a control as "not applicable" if the only_applicable_if block evaluates to false. (#6229)


  • Enhanced the lxc resource to test properties (#6243)

Bug Fixes

  • Fixed the inspec sign command which would break if a period was included in the profile name. (#6261)
  • Fixed compatibility issues with the oracledb_session resource when run on AIX with C shell. (#6257)
  • Fixed the launchd_service resource so that a negative status does not make it crash. (#6262)
  • Fixed an issue when installing the train-kubernetes plugin. (#6334)
  • Fixed an undefined method error when running an InSpec command in airgrapped environments. (#6337)
  • Update Ruby from 2.7.4 to 3.1.2 for omnibus builds. This fixes two CVEs (CVE-2021-41819 and CVE-2021-41816). (#6341)
  • Fixed a bug in profiles that have a dependency that includes a dash followed by a release version (e.g. 2.2.0-13). (#6377)