You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
> Note: [`jq`](https://jqlang.github.io/jq/) is an optional but recommended dependency.
@@ -128,6 +129,34 @@ Note that when distributions don't contain `auditctl`, the audit tests will chec
128
129
-n LIMIT optional In JSON output, when reporting lists of items (containers, images, etc.), limit the number of reported items to LIMIT. Default 0 (no limit).
By default the Docker Bench for Security script will run all available CIS tests and produce
133
162
logs in the log folder from current directory, named `docker-bench-security.log.json` and
@@ -137,16 +166,16 @@ If the docker container is used then the log files will be created inside the co
137
166
138
167
The CIS based checks are named `check_<section>_<number>`, e.g. `check_2_6` and community contributed checks are named `check_c_<number>`.
139
168
140
-
`sh docker-bench-security.sh -c check_2_2` will only run check `2.2 Ensure the logging level is set to 'info'`.
169
+
`bash docker-bench-security.sh -c check_2_2` will only run check `2.2 Ensure the logging level is set to 'info'`.
141
170
142
-
`sh docker-bench-security.sh -e check_2_2` will run all available checks except `2.2 Ensure the logging level is set to 'info'`.
171
+
`bash docker-bench-security.sh -e check_2_2` will run all available checks except `2.2 Ensure the logging level is set to 'info'`.
143
172
144
-
`sh docker-bench-security.sh -e docker_enterprise_configuration` will run all available checks except the docker_enterprise_configuration group
173
+
`bash docker-bench-security.sh -e docker_enterprise_configuration` will run all available checks except the docker_enterprise_configuration group
145
174
146
-
`sh docker-bench-security.sh -e docker_enterprise_configuration,check_2_2` will run all available checks except the docker_enterprise_configuration group and `2.2 Ensure the logging level is set to 'info'`
175
+
`bash docker-bench-security.sh -e docker_enterprise_configuration,check_2_2` will run all available checks except the docker_enterprise_configuration group and `2.2 Ensure the logging level is set to 'info'`
147
176
148
-
`sh docker-bench-security.sh -c container_images,container_runtime` will run just the container_images and container_runtime checks
177
+
`bash docker-bench-security.sh -c container_images,container_runtime` will run just the container_images and container_runtime checks
149
178
150
-
`sh docker-bench-security.sh -c container_images -e check_4_5` will run just the container_images checks except `4.5 Ensure Content trust for Docker is Enabled`
179
+
`bash docker-bench-security.sh -c container_images -e check_4_5` will run just the container_images checks except `4.5 Ensure Content trust for Docker is Enabled`
151
180
152
181
Note that when submitting checks, provide information why it is a reasonable test to add and please include some kind of official documentation verifying that information.
0 commit comments