DevSec Hardening FW

Security & DevOps

[Michée Lengronne @MicheeLengronne]

As announced yesterday, every @DevSecIO @chef #Inspec profiles migrated from `attribute` to `input` dropping support for Inspec v3 https://t.co/W9lTneIzwb

[Michée Lengronne @MicheeLengronne]

Because @chef #Inspec changed 'attribute' for 'input', we modified @DevSecIO profiles accordingly. Tell us if it breaks your builds. https://t.co/cb1anewyHg https://t.co/mr3fZZgkC6 https://t.co/lmMhhGqH17 https://t.co/MlPXQrNxxc

[Amulya Bhatia @amulya_bhatia]

Thanks to @DevSecIO, there is a one-stop shop for all your DevSecOps hardening needs + inspection using InSpec + remediation using @ansible, @chef and puppet: https://t.co/HW2DejaXUM #devops #DevSecOps #automation

[DevSec Hardening FW @DevSecIO]

@journeyer We set some ufw rules as part of the sysctl configuration. Likely we do not have firewall setup as you expect. Contributions to crate a firewall role are welcome.

[ᅟ @eitherwayio]

TIL about the "proc" file system on Linux. It gives you access to all process information.
I have used the @DevSecIO Hardening Framework. A day later my monitoring software couldn't get process statistics anymore. The total number of processes displayed was 2.

[DevSec Hardening FW @DevSecIO]

You were thinking what would make our @ansible server security roles even better? 🚀 We made it a lot easier to use them via ansible collections. Testing and quality are up! 🎉Thank you @zufallsheld and all contributors https://t.co/2pWAx2KOnq

[DevSec Hardening FW @DevSecIO]

Watch @MicheeLengronne talk about #devsecops! It covers vault, ansible and our devsec automation. https://t.co/hh7O837JkH 🇫🇷

[DevSec Hardening FW @DevSecIO]

Great work 👍🏻 @zufallsheld @MicheeLengronne Having more automated releases makes our open source content even more reliable.

[Michée Lengronne @MicheeLengronne]

I participated in automating releases creation in the @DevSecIO

https://t.co/zwme6nIh4x

[Openbloc @openbloc_fr]

Automatically harden your Ubuntu server with the open source tools #Chef #Inspec, #Ansible and the @DevSecIO framework: https://t.co/Br16HB1Mqp
#ubuntu #opensource #devops #devsec #devsecops #devtools #cybersecurity

[DevSec Hardening FW @DevSecIO]

@p35h4y It maybe an issue with inspec, the ssh_custom_path is an attribute with default value. Would you mind open an issue in github for the issues so that the community can help? In case you think documentation is missing, we are happy to accept PRs to add the information you need

[DevSec Hardening FW @DevSecIO]

🥳🥳Lets celebrate 400 🌠 stars for our #linux security baseline. A big thank you 🙏🙏🙏 to all contributors.

[centriascolocation @centriashamburg]

Erlauben Eure AWS Security Groups den uneingeschränkten SSH Zugriff? Testen bitte! https://t.co/9UJwAihkcc #inspec #aws /cc @chri_hartmann & @DevSecIO

[Artem Sidorenko @art_sidorenko]

chef-ssh-hardening v2.9.0 with EL 8 support is released https://t.co/z1P0XJL2Tu @DevSecIO

[Edmund Haselwanter @ehaselwanter]

Teaching #DevOps best practices and supporting tools. @gitlab @kitchenci @DevSecIO @ansible @chef @puppetize @cincproject @HashiCorp

[Johan @snygg_johan]

Made a containerized custom Allure reporter for the @DevSecIO Inspec CIS benchmarks, as well as a containerized benchmark runner.
Allure gives a nice overview, compliance trend, and human readable test description/rationale.
Check it out!
https://t.co/venpoS70U1

[DevSec Hardening FW @DevSecIO]

@q2dg We are using InSpec and you can execute them like Ansible and Chef recipes. All baselines are open source, too. Eg. https://t.co/XuxB5bq09j

[DevSec Hardening FW @DevSecIO]

@0x663030623472 @jensschanz @stankowic_devel Always great to see @DevSecIO in the wild 😜

[DevSec Hardening FW @DevSecIO]

🥳We had a great start into @haacktoberfest! Help us to fill the In-Progress column with your contribution 🏆. Let us make the world more secure place! Have a look at https://t.co/Kfvs5G0fmV for open issues. #opensource #security for #devops #devsec #ansible #chef #puppet #inspec

[DevSec Hardening FW @DevSecIO]

Help us to improve our open source #security automation! We participate in @hacktoberfest with our @ansible @chef @puppet and #inspec projects. See https://t.co/Ad3Sn5NkXr for more details.

[Mario Platt @madplatt]

@nickdothutton @chef @OpenPolicyAgent @ansible @thismarkp @DevSecIO has a bunch of templates already that can be used off the shelf to Check compliance and apply the hardening.