diff --git a/README.md b/README.md index 57b13ca..cde2329 100644 --- a/README.md +++ b/README.md @@ -88,6 +88,7 @@ version 1.13.0 or later. -e CHECK optional Comma delimited list of specific check(s) to exclude -i INCLUDE optional Comma delimited list of patterns within a container or image name to check -x EXCLUDE optional Comma delimited list of patterns within a container or image name to exclude from check + -n LIMIT optional In JSON output, when reporting lists of items (containers, images, etc.), limit the number of reported items to LIMIT. Default 0 (no limit). ``` By default the Docker Bench for Security script will run all available CIS tests diff --git a/docker-bench-security.sh b/docker-bench-security.sh index 8d4e8fb..1773d88 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -1,11 +1,11 @@ #!/bin/sh -# ------------------------------------------------------------------------------ +# -------------------------------------------------------------------------------------------- # Docker Bench for Security # # Docker, Inc. (c) 2015-2021 # # Checks for dozens of common best-practices around deploying Docker containers in production. -# ------------------------------------------------------------------------------ +# -------------------------------------------------------------------------------------------- version='1.3.5' @@ -50,7 +50,7 @@ usage () { -b optional Do not print colors -h optional Print this help message - -l FILE optional Log output in FILE + -l FILE optional Log output in FILE, inside container if run using docker -c CHECK optional Comma delimited list of specific check(s) -e CHECK optional Comma delimited list of specific check(s) to exclude -i INCLUDE optional Comma delimited list of patterns within a container or image name to check