From e6a742ba388ab0cb40ccf43b8c5cb0b6df6ee5a7 Mon Sep 17 00:00:00 2001 From: Adin Ermie Date: Tue, 28 Sep 2021 17:51:40 -0400 Subject: [PATCH] Added multiple check groups example Added an example of running multiple groups of checks, as the documentation did not clearly show this is possible (and the proper syntax). --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 13109c0..7cb767d 100644 --- a/README.md +++ b/README.md @@ -107,6 +107,8 @@ The CIS based checks are named `check_
_`, e.g. `check_2_6` and `sh docker-bench-security.sh -e docker_enterprise_configuration,check_2_2` will run allavailable checks except the docker_enterprise_configuration group and `2.2 Ensure the logging level is set to 'info'` +`sh docker-bench-security.sh -c container_images,container_runtime` will run just the container_images and container_runtime checks + `sh docker-bench-security.sh -c container_images -e check_4_5` will run just the container_images checks except `4.5 Ensure Content trust for Docker is Enabled` Note that when submitting checks, provide information why it is a reasonable test to add and please include some kind of official documentation verifying that information.