diff --git a/README.md b/README.md index ab69338..7dad56e 100644 --- a/README.md +++ b/README.md @@ -75,13 +75,13 @@ A workflow for hardening a MongoDB container against a STIG using Packer and Ans - Remove the `--controls` flag to run all inspec checks at once. ``` - inspec exec spec/mongo-inspec-profile/ -t docker://mongo-hardened --controls=SV-252134 --input-file=spec/mongo-inspec-profile/inputs.yml + inspec exec spec/mongo-inspec-profile/ -t docker://mongo-hardened --controls=SV-252134 --no-create-lockfile --input-file=spec/mongo-inspec-profile/inputs.yml ``` - To get into the inspec shell for deeper testing ``` - inspec shell -t docker://mongo-hardened --depends=spec/mongo-inspec-profile/ --input-file=spec/mongo-inspec-profile/inputs.yml + inspec shell -t docker://mongo-hardened --depends=spec/mongo-inspec-profile/ --no-create-lockfile --input-file=spec/mongo-inspec-profile/inputs.yml ``` --- diff --git a/spec/mongo-inspec-profile/inspec.yml b/spec/mongo-inspec-profile/inspec.yml index c219745..59408dc 100644 --- a/spec/mongo-inspec-profile/inspec.yml +++ b/spec/mongo-inspec-profile/inspec.yml @@ -11,6 +11,7 @@ supports: [] depends: - name: mongodb-enterprise-advanced-4-stig-baseline git: https://github.com/mitre/mongodb-enterprise-advanced-4-stig-baseline.git + branch: main inspec_version: null inputs: