v9.5.0

Release v9.5.0

Audit Cookbook 4.1.0

v4.1.0 (2017-07-05)

Full Changelog

Implemented enhancements:

• Raise exception if no token is set when using the chef-automate fetcher #249 (adamleff)
• Fail Chef run if Audit Mode is enabled #238 (adamleff)

Fixed bugs:

• support profile inheritance for Chef Compliance in audit cookbook 4 #256 (chris-rock)
• fix Reporter::ChefServer does not exist #253 (chris-rock)
• fix InSpec 1.27.0 Compliance::API use #251 (chris-rock)
• Make json-file reporter save JSON content #246 (jeremiahsnapp)
• fix chef compliance profile handling #243 (chris-rock)

Closed issues:

• Ensure support for InSpec 1.25.1+ #252
• json-file reporter saves ruby hash instead of JSON #244
• reporter: chef-server-compliance generates error: NameError: uninitialized constant Reporter::ChefServer #234
• reporter: chef-compliance fails with error "ArgumentError: wrong number of arguments (given 2, expected 1)>" #232

Merged pull requests:

• remove unused test #255 (chris-rock)
• update travis configuration #254 (chris-rock)
• Add link to supported configs in README #250 (adamleff)
• ensure json file outputs a json file #247 (chris-rock)
• Ensure min version of inspec is used #237 (alexpop)
• Update comments in attributes file. #230 (alexpop)

Audit Cookbook 4.0.0

v4.0.0 (2017-05-22)

Full Changelog

Closed issues:

• Implement Chef-solo Chef Automate fetcher #226

Merged pull requests:

• update readme #229 (chris-rock)
• add automate fetcher for chef solo #227 (chris-rock)
• Remove typed_attributes and leave the backend handle attributes #225 (alexpop)
• Reduce report enrichment, bump cookbook to version 4.0.0 #224 (alexpop)
• readme updates #223 (jeremymv2)

Audit Cookbook 3.1.0

Deprecation Note:

Please use reporter instead of collector attribute

With version 3.1.0 the use of the collector attribute is deprecated. Please use reporter instead. The collector attribute will be removed in the next major version.

"audit": {
  "collector": "chef-server-compliance",

becomes:

"audit": {
  "reporter": "chef-server-compliance",

Use chef-server-automate and chef-automate instead of chef-server-visibility and chef-visibility

With version 3.1.0 the reporter attribute deprecates the values chef-server-visibility and chef-visibility. They have been renamed:

• chef-server-visibility => chef-server-automate
• chef-visibility => chef-automate

The support for values chef-server-visibility and chef-visibility will be removed in the next major version.

Change Log

v3.1.0 (2017-05-04)

Full Changelog

Closed issues:

• Inspec gem is constantly reinstalled if version is specified #215
• JSON output contains "You have X number of issues or packages out of date" #207
• Audit coobook via Chef Automate fails to inherit profiles #206
• Rename collector to reporter #205
• Audit cookbook failing to install from internal Ruby gem mirror #200
• Document new chef-server-compliance collector in Readme #190
• Missing default attribute fail\_if\_any\_audits\_failed #182
• ability to install inspec as a package #164
• Warning from wrong attribute syntax #161
• Cannot report meta-profiles to Chef Compliance #155
• Support certificates (insecure) for reporting to chef-visibility #150
• Missing profile results in misleading error message in chef_gate log #144
• Vendor InSpec gem #112
• Compliance Profile inheritence does not work with audit cookbook #38
• Provide gem_source attribute for fetching any required gems #26

Merged pull requests:

• fix cc token and ensure we create a new string for a url #220 (chris-rock)
• stick to plain ruby hash #219 (chris-rock)
• fix reinstallation of inspec if version is already installed #218 (chris-rock)
• update metadata and gemfile #216 (chris-rock)
• refactor reporting #214 (chris-rock)
• Use Automate instead of Visibility #213 (chris-rock)
• Always use json format for inspec report #212 (chris-rock)
• Deprecate collector attribute #211 (chris-rock)
• Add report summary output to chef logs #210 (chris-rock)
• use inspec without nokogiri #209 (chris-rock)
• better error output #208 (chris-rock)

Audit Cookbook 3.0.0

v3.0.0 (2017-04-03)

Full Changelog

Implemented enhancements:

• Automate profile fetcher #193

Closed issues:

• upload failed for cookbooks/audit because missing "compat_resource" #204
• Missing data in Automate UI #199

Merged pull requests:

• Only install InSpec if not installed or version provided #203 (adamleff)
• Use chef-server-compliance vs chef-server #202 (jerryaldrichiii)

Audit Cookbook 2.3.0

v2.3.0 (2016-11-23)

Full Changelog

Closed issues:

• Update chef web docs #159
• Improve cookbook usability(fetcher, reporter) renaming #158

Merged pull requests:

• Install inspec from source #168 (stephenlauck)
• Update fetcher for chef-server-visibility and add chef-server-compliance collector #163 (alexpop)
• Mention the integration guide between Chef Server and Automate #160 (alexpop)

Audit Cookbook 2.1.0

v2.1.0 (2016-11-11)

Full Changelog

Closed issues:

• Modify wording of ERROR: Please take a look at your interval settings #149

Merged pull requests:

• Add fetcher info to readme #154 (vjeffrey)
• Add insecure flag for Collector::ChefVisibility #153 (jerryaldrichiii)
• add reference to self-signed certs with visibility #152 (chris-rock)
• change interval timing msg to warn #151 (vjeffrey)
• dry up chef_gem inspec resource declarations #147 (jeremymv2)

Audit Cookbook 2.0.0

v2.0.0 (2016-11-04)

Full Changelog

Closed issues:

• Cannot run profiles from Supermarket #139
• version 2.0.0 reporting resources updated #138
• inspec_version attribute specified twice #137
• README.md "Upload cookbook to Chef Server" #136
• Remove temporary report file #132
• Add Chef Server authentication support #129
• Add unit tests #128
• JSON file reporter #126
• Implement RFC: Harmonize profile location targets #118
• Features missing from 2.0.0 #116
• Implement reporting as InSpec plugin #111
• Harmonize audit cookbook profile fetcher with InSpec fetchers #110
• profile scan is reported every chef-client run even if compliance_profile resource wasn't executed #102
• Timing issues during report aggregation #81
• audit cookbook compliance run and report should not report converge #70
• quiet should control whether converge is reported by Chef #65
• Node information sent to Compliance after first audit run are not accurate #40
• 403 Forbidden #21

Merged pull requests:

• adding support for alternate gem source #146 (jeremymv2)
• enable chef-server fetcher attribute #145 (chris-rock)
• Supermarket #143 (jeremymv2)
• fixing resources reporting as updated #142 (jeremymv2)
• fix #136 thanks @jeremymv2 #141 (chris-rock)
• fix #137 #140 (chris-rock)
• implement chef-server fetcher and reporter #135 (chris-rock)
• fix reporting files #134 (vjeffrey)
• do not hand over run context into reporter #133 (chris-rock)
• Add unit tests #131 (vjeffrey)
• update readme #130 (chris-rock)
• bring back intervals #127 (vjeffrey)
• Integrate with Chef Compliance #124 (chris-rock)
• move testing deps to integration group in berksfile #123 (vjeffrey)
• Upload profiles to Chef Compliance via Chef resource #122 (vjeffrey)
• harmonize profile targets #121 (vjeffrey)
• Update Github PR template #120 (tas50)
• recover examples #119 (chris-rock)
• add reference to 1.x documentation #117 (chris-rock)
• Audit docs improvements #115 (alexpop)
• Activate test-kitchen in travis #114 (chris-rock)
• use chef handler to run inspec tests #113 (vjeffrey)

Audit Cookbook 0.14.3

v0.14.3 (2016-08-26)

Full Changelog

Merged pull requests:

• improve compliance refresh token handling #85 (chris-rock)
• Minor fixes and changes #84 (tas50)