From 2132b03b92f03940fa1c0a69fc7cf339aa5d49e8 Mon Sep 17 00:00:00 2001 From: Razvan Stoica Date: Wed, 10 Mar 2021 10:01:18 +0200 Subject: [PATCH] Usage instructions aligned between the README.md and docker-bench-security.sh files --- README.md | 1 + docker-bench-security.sh | 6 +++--- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 57b13ca..cde2329 100644 --- a/README.md +++ b/README.md @@ -88,6 +88,7 @@ version 1.13.0 or later. -e CHECK optional Comma delimited list of specific check(s) to exclude -i INCLUDE optional Comma delimited list of patterns within a container or image name to check -x EXCLUDE optional Comma delimited list of patterns within a container or image name to exclude from check + -n LIMIT optional In JSON output, when reporting lists of items (containers, images, etc.), limit the number of reported items to LIMIT. Default 0 (no limit). ``` By default the Docker Bench for Security script will run all available CIS tests diff --git a/docker-bench-security.sh b/docker-bench-security.sh index 8d4e8fb..1773d88 100755 --- a/docker-bench-security.sh +++ b/docker-bench-security.sh @@ -1,11 +1,11 @@ #!/bin/sh -# ------------------------------------------------------------------------------ +# -------------------------------------------------------------------------------------------- # Docker Bench for Security # # Docker, Inc. (c) 2015-2021 # # Checks for dozens of common best-practices around deploying Docker containers in production. -# ------------------------------------------------------------------------------ +# -------------------------------------------------------------------------------------------- version='1.3.5' @@ -50,7 +50,7 @@ usage () { -b optional Do not print colors -h optional Print this help message - -l FILE optional Log output in FILE + -l FILE optional Log output in FILE, inside container if run using docker -c CHECK optional Comma delimited list of specific check(s) -e CHECK optional Comma delimited list of specific check(s) to exclude -i INCLUDE optional Comma delimited list of patterns within a container or image name to check