mitre / asgard Goto Github PK
View Code? Open in Web Editor NEWProof of Concept - Alpha - An exploration in a mega container to link up all the SAF security tools
License: Other
Proof of Concept - Alpha - An exploration in a mega container to link up all the SAF security tools
License: Other
brew install yarn
https://yarnpkg.com/lang/en/docs/install/#mac-stable
Step 18/25 : RUN sh -c "RAILS_ENV=$RAILS_ENV RAILS_RELATIVE_URL_ROOT=$RAILS_RELATIVE_URL_ROOT SECRET_KEY_BASE=$(openssl rand -hex 64) bundle exec rake assets:precompile"
---> Running in 6dd6af3118f9
Yarn executable was not detected in the system.
Download Yarn at https://yarnpkg.com/en/docs/install
I, [2018-09-15T15:08:49.063520 #11] INFO -- : Writing /var/www/heimdall/public/assets/FontAwesome-ecd72f31910a8ee2726fd17bd459be26f230779f3f3ed5f69ebf829e4b12e768.otf
inspec --version
gives 2.1.72 while also saying that the latest version is 2.2.64. It's probably just installing the stable version as opposed to the latest version, there's probably a flag for the install script that fixes it.
Would sub-trees make more sense here than sub-modules
Is there a better solution
All of the fontawesome and material design fonts don't get loaded.
The MITRE InSpec Team has been working with
Dev-Sec Project
( www.place.io )
The devsec project is the open source community building inspec profiles that are best-practice and service driven rather than just one-to-one alignment with a formal compliance guidance document. The dev-sec community focus on helping build hardening and validation around services and capabilities that you can use as reference or as part of inherited profiles to help you build more security systems.
DISA STIG
( iase.disa.mil/stigs... )
The DISA Security Technical Implementation Guides are ... . They are derived security guidance from the DISA Security Requirements Guides which outline the general security guidance .... ( I am sure you can find a desc on the IASE site )
CIS Benchmarks
( www.cisbenchmarks... )
( From the website desc )
Examples and demos of full and 'micro-profiles' showing various validation and security issues that InSpec can help solve. These are also g
Running build.sh errors on step 7/21 with fatal: unable to access 'https://gitlab.mitre.org/inspec/inspec_to.git/': Could not resolve host: gitlab.mitre.org
. Slightly further down the stack trace is more details: Bundler::Source::Git::GitCommandError Git error: command
git clone 'https://gitlab.mitre.org/inspec/inspec_to.git' "/usr/local/bundle/cache/bundler/git/inspec_to-4a17dc4f0a337bc03984f001012b347ef1cc19ab" --bare --no-hardlinks --quiet in directory /var/www/heimdall has failed.fatal: unable to access 'https://gitlab.mitre.org/inspec/inspec_to.git/': Could not resolve host: gitlab.mitre.org
. Is there an alternate repository to use here?
The profile posts aren't updated when the container is brought up, just run the script in the Dockerfile.
None of the assets get loaded because nginx isn't playing nice with the gotty's server. Right now the terminal is still accessible at localhost:8080
but I'd like to get localhost/terminal
working as well.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.