-
Notifications
You must be signed in to change notification settings - Fork 6
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
The Packer plugin ingestion pipeline for remote docs requires the plugin documentation be in a specific format/directory to ensure the correct documentation is being ingested. This change move the documentation into a component type directory under the top-level docs directory, and splits the single documentation file into two separate files: a plugin overview file (docs/provisioners/index.mdx), and a provisioner specific file (docs/provisioner/mondoo.mdx). Signed-off-by: Wilken Rivera <[email protected]> Signed-off-by: Wilken Rivera <[email protected]>
- Loading branch information
Showing
2 changed files
with
62 additions
and
47 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,47 @@ | ||
--- | ||
description: | | ||
The Mondoo packer provisioner scans machine-image builds for vulnerabilities | ||
and misconfigurations by executing security policies-as-code. | ||
page_title: Mondoo - Provisioner | ||
sidebar_title: Mondoo | ||
--- | ||
|
||
# Mondoo Provisioner | ||
|
||
Type: `monodoo` | ||
|
||
The `mondoo` provisioner scans [Packer](https://www.packer.io) | ||
builds for vulnerabilities and misconfigurations by executing security | ||
policies-as-code enabled in [Mondoo Platform](https://console.mondoo.com). | ||
Mondoo Platform comes stocked with an ever-increasing collection of | ||
certified security policies which can be easily customize to meet your needs. | ||
|
||
Mondoo supports scanning of Linux, Windows, and macOS, as well as Docker containers. | ||
|
||
### Basic Example | ||
|
||
```hcl | ||
provisioner "mondoo" { | ||
on_failure = "continue" | ||
mondoo_config_path = "/etc/mondoo-config.json" | ||
score_threshold = 85 | ||
asset_name = "example-secure-base-image" | ||
sudo { | ||
active = true | ||
} | ||
annotations = { | ||
Source_AMI = "{{ .SourceAMI }}" | ||
Creation_Date = "{{ .SourceAMICreationDate }}" | ||
} | ||
} | ||
} | ||
``` | ||
|
||
## Configuration Reference | ||
|
||
### Optional: | ||
@include '/provisioner/Config-not-required.mdx' | ||
|
||
#### SudoConfig | ||
@include '/provisioner/SudoConfig-not-required.mdx' |