Category:
Chef InSpec
Chef Confirms No Products Affected by Backdoored RubyGems
By Galen Emery
At Chef, we have a cross-functional security team who evaluates and responds to potential security incidents. Because a significant portion of our code uses Ruby and Ruby libraries (known as “gems”), we have been paying close attention to the reports of malicious code insertion into several gems.
Read moreLearn Chef Rally: What a Treat!
The Learn Chef Rally team is celebrating a major milestone, and you’re invited to party with us!
Read moreCloud Security Assessments in AWS
By Nick Rycar
In our most recent webinar, Cloud Security Assessment for AWS Instances, we took a look at how Chef can help to secure environments in Amazon Web Services.
Read moreSecure Your Cloud Estate with Continuous Audits
By Nick Rycar
To meet the demands of an ever more connected world, executing on a comprehensive cloud strategy has become a critical component for organizations at any scale.
Read moreDon’t Leave Your S3 Buckets Wide Open
By Mandi Walls
IT security can feel like an endless war against the unknown. Especially when your big old comfortable monolith with one access point gets spread out into a million small microservice pieces all over the place. Securing distributed systems is a challenge that requires constant vigilance and attention to detail.
Read moreReintro to Chef InSpec 4.0 and End of Life Announcement for v1.x and v2.x
With all of the excitement during ChefConf 2019, you may have missed that we released Chef InSpec 4.0 in May 2019. We put a focus on optimizing the core Chef InSpec product while making it more extensible and capable in handling the next generation of resources. The highlights of Chef InSpec version 4.
Read moreYour Time At ChefConf 2019: Chef InSpec and Security
By Mandi Walls
Chef InSpec is a powerful tool for creating and managing complex security profiles for your infrastructure. Whether you’re using Windows or Linux, Chef InSpec can help your team managing the demands of the modern security landscape.
Read moreWhat Does the New Chef Mean for the Community?
Chef would not exist without its community. Our Open Source community built the foundation upon which every part of Chef stands. Together we continue to evolve and grow and shape each other as Chef moves into its third chapter.
Read moreEnd of Support: A Catalyst to Application Lifecycle Modernization
As many of you know, the standard Microsoft lifecycle policy is 10 years of support (5 for mainstream + 5 for extended support) for business and developer products, such as SQL and Windows servers. At the end of the extended support period, patches or security updates are no longer provided, creating security and compliance issues.
Read moreHit the Cloud Running With Chef InSpec Profiles
Following on from the recent announcement that Chef has achieved CIS certification across AWS, Azure and GCP let’s take a deeper look at how to get started with Chef InSpec on these cloud providers. Starting with InSpec v3.7.7 there is profile generation support for AWS, Azure, and GCP.
Read more