brew tap padok-team/tap
brew install yatas
yatas --init
yatas --install
yatas -h
--details: 显示找到问题的详细信息; --compare: 将之前的扫描结果与当前的扫描结果进行区别对比;
--ci: 如果找到了问题,则退出代码为1,否则为0;
--resume: 仅显示测试通过和失败的数量;
--time: 显示每次测试所花费的时间;
--init: 在当前目录下创建一个.yatas.yml文件;
--install: 安装所需的插件;
--only-failure: 仅显示失败的测试;
ignore:
- id: "AWS_VPC_004"
regex: true
values:
- "VPC Flow Logs are not enabled on vpc-.*"
- id: "AWS_VPC_003"
regex: false
values:
- "VPC has only one gateway on vpc-08ffec87e034a8953"
plugins:
- name: "aws"
enabled: true
description: "Check for AWS good practices"
exclude:
- AWS_S3_001
plugins:
- name: "aws"
enabled: true
description: "Check for AWS good practices"
include:
- "AWS_VPC_003"
- "AWS_VPC_004"
export YATAS_LOG_LEVEL=debug
https://github.com/padok-team/yatas-template https://github.com/padok-team/yatas-aws https://github.com/padok-team/yatas-markdown
精彩推荐