{"repo":"ansible-lockdown/UBUNTU22-CIS-Audit","free":true,"listed":false,"github":"https://github.com/ansible-lockdown/UBUNTU22-CIS-Audit","clone":"git clone https://github.com/ansible-lockdown/UBUNTU22-CIS-Audit.git","description":"Automated CIS Benchmark Compliance Audit for Ubuntu 22 with Ansible & GOSS","language":"YAML","stars":51,"topics":["cis-benchmark","cis","ansible","ansible-playbook","ansible-role","automation","cis-compliance","cis-hardening","cis-security","configuration-management"],"license":"MIT","category":"deployment-docker-iac","readme_excerpt":"Ubuntu 22.04 Goss config Overview Based on CIS Ubuntu Linux 22.04 LTS Benchmark v3.0.0 Release Set of configuration files and directories to run the first stages of CIS of Ubuntu 22.04 servers This is configured in a directory structure level. This could do with further testing but sections 1.x should be complete Goss is run based on the goss.yml file in the top level directory. This specifies the configuration. Requirements You must have goss available to your host you would like to test. You must have sudo/root access to the system as some commands require privilege information. Assuming you have already clone this repository you can run goss from where you wish. Please refer to the audit documentation for usage. - readthedocs This also works alongside the Ansible Lockdown UBUNTU22-CIS role Which will: - install - audit - remediate - audit Join us On our Discord Server to ask questions, discuss features, or just chat with other Ansible-Lockdown users Set of configuration files and directories to run the first stages of CIS of UBUNTU 22 servers This is configured in a directory structure level. Goss is run based on the goss.yml file in the top level directory. This specifies the configuration. further information - ReadtheDocs - goss documentation - CIS standards","default_branch":null,"files":null,"tree":[],"storefront":"/r/ansible-lockdown","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/ansible-lockdown/UBUNTU22-CIS-Audit/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}