GuillaumeHemmen/docker-bench-security
1
0
Fork 0
mirror of https://github.com/docker/docker-bench-security.git synced 2025-01-19 00:32:34 +01:00
Code Issues Projects Releases Packages Wiki Activity

Usage instructions aligned between the README.md and docker-bench-security.sh files

Browse source
This commit is contained in:
Razvan Stoica 2021-03-10 10:01:18 +02:00
parent c00ef4330b
commit 2132b03b92
2 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
README.md
View file

@ -88,6 +88,7 @@ version 1.13.0 or later.
-e CHECK optional Comma delimited list of specific check(s) to exclude -e CHECK optional Comma delimited list of specific check(s) to exclude
-i INCLUDE optional Comma delimited list of patterns within a container or image name to check -i INCLUDE optional Comma delimited list of patterns within a container or image name to check
-x EXCLUDE optional Comma delimited list of patterns within a container or image name to exclude from check -x EXCLUDE optional Comma delimited list of patterns within a container or image name to exclude from check
-n LIMIT optional In JSON output, when reporting lists of items (containers, images, etc.), limit the number of reported items to LIMIT. Default 0 (no limit).
``` ```
By default the Docker Bench for Security script will run all available CIS tests By default the Docker Bench for Security script will run all available CIS tests

6
docker-bench-security.sh
View file

@ -1,11 +1,11 @@
#!/bin/sh #!/bin/sh
# ------------------------------------------------------------------------------ # --------------------------------------------------------------------------------------------
# Docker Bench for Security # Docker Bench for Security
# #
# Docker, Inc. (c) 2015-2021 # Docker, Inc. (c) 2015-2021
# #
# Checks for dozens of common best-practices around deploying Docker containers in production. # Checks for dozens of common best-practices around deploying Docker containers in production.
# ------------------------------------------------------------------------------ # --------------------------------------------------------------------------------------------
version='1.3.5' version='1.3.5'
@ -50,7 +50,7 @@ usage () {
-b optional Do not print colors -b optional Do not print colors
-h optional Print this help message -h optional Print this help message
-l FILE optional Log output in FILE -l FILE optional Log output in FILE, inside container if run using docker
-c CHECK optional Comma delimited list of specific check(s) -c CHECK optional Comma delimited list of specific check(s)
-e CHECK optional Comma delimited list of specific check(s) to exclude -e CHECK optional Comma delimited list of specific check(s) to exclude
-i INCLUDE optional Comma delimited list of patterns within a container or image name to check -i INCLUDE optional Comma delimited list of patterns within a container or image name to check