This repository was archived by the owner on Sep 25, 2023. It is now read-only.

SAF Wiki

Jump to bottom

Shivani Karikar edited this page Sep 11, 2023 · 6 revisions

Follow this guide to develop an InSpec overlay profile based on CMS ARS guidance.

Pre-requisites:

Ruby (Video walkthrough | Quickstart Docs)
InSpec Developer Class (MITRE SAF training)

Research:

Ensure that there is a baseline profile available that your overlay can depend on
Verify that the development of an ARS overlay for that baseline hasn't already been completed

CMS ARS overlay development:

Overlay Tracker Setup: Outline the changes required in an Excel workbook using the template
Overlay Target Setup: Spin up target to test your profile against
Overlay Development: Develop the overlay based on the tracker and test your overlay using your targets

Note: Please skim through the best practices before contributing or creating a pull request.