GuillaumeHemmen/docker-bench-security
1
0
Fork 0
mirror of https://github.com/docker/docker-bench-security.git synced 2025-06-19 21:29:08 +00:00
Code Issues Projects Releases Packages Wiki Activity

Added -t target parameter and its description to README

Browse source
This commit is contained in:
Halil Kaya 2020-06-11 16:56:12 +03:00
parent 41593e80d0
commit 2ea68da3aa
1 changed files with 6 additions and 2 deletions

8
README.md
View file

@ -86,8 +86,9 @@ version 1.13.0 or later.
-l FILE optional Log output in FILE
-c CHECK optional Comma delimited list of specific check(s)
-e CHECK optional Comma delimited list of specific check(s) to exclude
-i INCLUDE optional Comma delimited list of patterns within a container or image name to check
-x EXCLUDE optional Comma delimited list of patterns within a container or image name to exclude from check
-i INCLUDE optional Comma delimited list of patterns within a container name to check
-x EXCLUDE optional Comma delimited list of patterns within a container name to exclude from check
-t TARGET optional Comma delimited list of images name to check
```
By default the Docker Bench for Security script will run all available CIS tests
@ -114,6 +115,9 @@ and `2.2 Ensure the logging level is set to 'info'`
will run just the container_images checks except
`4.5 Ensure Content trust for Docker is Enabled`
`sh docker-bench-security.sh -l /tmp/docker-bench-security.sh.log -t image_name`
will run all available checks on the image_name image
Note that when submitting checks, provide information why it is a
reasonable test to add and please include some kind of official documentation
verifying that information.