update actions

mitre · Jul 8, 2024 · 4e60011 · 4e60011
1 parent 4d70d59
commit 4e60011
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 8 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -21,13 +21,8 @@ jobs:
     steps:
       - name: Add Dependencies
         run: |
-          sudo apt-get update
-          curl -fsSL https://get.docker.com -o get-docker.sh
-          curl -fsSL https://apt.releases.hashicorp.com/gpg | sudo apt-key add -
-          sudo apt-add-repository "deb [arch=amd64] https://apt.releases.hashicorp.com $(lsb_release -cs) main"
-          sudo apt-get install packer
-          python3 -m pip install --user ansible
-          python3 -m pip install --upgrade --user ansible
+          # python3 -m pip install --user ansible
+          # python3 -m pip install --upgrade --user ansible
           npm install -g @mitre/saf
           curl -L https://omnitruck.cinc.sh/install.sh | sudo bash -s -- -P cinc-auditor
 

diff --git a/mongo-validate.pkr.hcl b/mongo-validate.pkr.hcl
@@ -62,7 +62,8 @@ build {
   # docker ps
   provisioner "shell-local" {
     inline = [
-      "docker ps -a"
+      "docker ps -a",
+      "inspec detect -t docker://mongo-hardened"
     ]
   }
 
@@ -80,6 +81,14 @@ build {
     script           = "spec/scripts/scan.sh"
   }
 
+  # docker ps
+  provisioner "shell-local" {
+    inline = [
+      "docker ps -a",
+      "inspec detect -t docker://mongo-hardened"
+    ]
+  }
+
   ### REPORT
   provisioner "shell-local" {
     environment_vars = [
@@ -91,6 +100,13 @@ build {
     scripts          = ["spec/scripts/report.sh"]
   }
 
+  # docker ps
+  provisioner "shell-local" {
+    inline = [
+      "docker ps -a"
+    ]
+  }
+
   ### VERIFY
   provisioner "shell-local" {
     environment_vars = [