update readme

Signed-off-by: Christoph Hartmann <[email protected]>

README.md

@@ -71,11 +71,16 @@ verifier:
 You can also decide to only run specific controls, instead of a full profile. This is done by specifying a list of controls:
 
 ```
-verifier:
-  name: inspec
-  controls:
-    - control-id1
-    - control-id4
+suites:
+  - name: supermarket
+    run_list:
+      - recipe[apt]
+      - recipe[ssh-hardening]
+    verifier:
+      inspec_tests:
+        - name: dev-sec/ssh-baseline
+      controls:
+        - sshd-46
     ...
 ```
 

lib/kitchen/verifier/inspec.rb

@@ -186,7 +186,7 @@ def runner_options(transport, state = {}, platform = nil, suite = nil) # rubocop
           runner_options["format"] = config[:format] unless config[:format].nil?
           runner_options["output"] = config[:output] % { platform: platform, suite: suite } unless config[:output].nil?
           runner_options["profiles_path"] = config[:profiles_path] unless config[:profiles_path].nil?
-          runner_options["controls"] = config[:controls]
+          runner_options[:controls] = config[:controls]
         end
       end
 

spec/kitchen/verifier/inspec_spec.rb

@@ -209,7 +209,7 @@
       expect(Inspec::Runner).to receive(:new)
         .with(
           hash_including(
-            "controls" => %w{a control}
+            controls: %w{a control}
           )
         )
         .and_return(runner)