diff --git a/mongo-validate.pkr.hcl b/mongo-validate.pkr.hcl index 3d0b0d8..a8df4e2 100644 --- a/mongo-validate.pkr.hcl +++ b/mongo-validate.pkr.hcl @@ -78,16 +78,16 @@ build { script = "spec/scripts/scan.sh" } - // ### ATTEST - // provisioner "shell-local" { - // environment_vars = [ - // "INSPEC_FILE=${var.attestation.inspec_report_filename}", - // "REPORT_DIR=${var.attestation.report_dir}", - // "ATTESTATION_FILE=${var.attestation.attestation_filename}", - // "ATTESTED_FILE=${var.attestation.attested_inspec_filename}" - // ] - // script = "spec/scripts/attestation.sh" - // } + ### ATTEST + provisioner "shell-local" { + environment_vars = [ + "INSPEC_FILE=${var.attestation.inspec_report_filename}", + "REPORT_DIR=${var.attestation.report_dir}", + "ATTESTATION_FILE=${var.attestation.attestation_filename}", + "ATTESTED_FILE=${var.attestation.attested_inspec_filename}" + ] + script = "spec/scripts/attestation.sh" + } ### REPORT provisioner "shell-local" { diff --git a/spec/scripts/report.sh b/spec/scripts/report.sh index bcb9204..e3f5ccc 100755 --- a/spec/scripts/report.sh +++ b/spec/scripts/report.sh @@ -2,6 +2,8 @@ set -uo pipefail ### Report InSpec results to Heimdall ### +echo "--- Reporting InSpec results to Heimdall ---" + saf view summary -i $REPORT_DIR/*.json if $REPORT_TO_HEIMDALL then