InSpec审核和测试框架
InSpec是一款人类和机器可读语言的基础设施开源测试框架，它用于确保规范性，安全性和政策要求。
# Disallow insecure protocols by testing
describe package('telnetd') do
it { should_not be_installed }
end
describe inetd_conf do
its("telnet") { should eq nil }
end
不管什么时候需要InSpec都能很容易地运行你的测试程序
# run test locally
inspec exec test.rb
# run test on remote host on SSH
inspec exec test.rb -t ssh://user@hostname
# run test on remote windows host on WinRM
inspec exec test.rb -t winrm://Administrator@windowshost --password 'your-password'
# run test on docker container
inspec exec test.rb -t docker://container_id
特性：
Built-in Compliance: Compliance no longer occurs at the end of the release cycle
Targeted Tests: InSpec writes tests that specifically target compliance issues
Metadata: Includes the metadata required by security and compliance pros
Easy Testing: Includes a command-line interface to run tests quickly
评论