diff --git a/README.md b/README.md index 523847b..9d315a4 100644 --- a/README.md +++ b/README.md @@ -131,7 +131,7 @@ Docker EE is on the same code base as Docker CE, so also built from Moby, with c * [Drone](https://github.com/drone/drone) - Continuous integration server built on Docker and configured using YAML files. * [GitLab CI](https://about.gitlab.com/gitlab-ci/) - GitLab has integrated CI to test, build and deploy your code with the use of GitLab runners. * [GOCD-Docker](https://github.com/gocd/gocd-docker)Go Server and Agent in docker containers to provision. -* [InSpec](https://github.com/chef/inspec) - InSpec is an open-source testing framework for infrastructure with a human- and machine-readable language for specifying compliance, security and policy requirements. +* [InSpec][inspec] - InSpec is an open-source testing framework for infrastructure with a human- and machine-readable language for specifying compliance, security and policy requirements. By [@chef](https://github.com/chef) * [Microservices Continuous Deployment](https://github.com/francescou/docker-continuous-deployment) - Continuous deployment of a microservices application. * [Screwdriver](http://screwdriver.cd/) - Yahoo's OpenSource buildplatform designed for Continous Delivery. * [Skipper](https://github.com/Stratoscale/skipper) - Easily dockerize your Git repository by [@Stratoscale](https://github.com/Stratoscale) @@ -371,6 +371,7 @@ Services to securely store your Docker images. * [Træfɪk](https://github.com/containous/traefik) - Automated reverse proxy and load-balancer for Docker, Mesos, Consul, Etcd... By [@EmileVauge](https://github.com/emilevauge) ## Security +* [CIS Docker Benchmark](https://github.com/dev-sec/cis-docker-benchmark) - This [InSpec][inspec] compliance profile implement the CIS Docker 1.12.0 Benchmark in an automated way to provide security best-practice tests around Docker daemon and containers in a production environment. By [@dev-sec](https://github.com/dev-sec) * [Clair](https://github.com/coreos/clair) - Clair is an open source project for the static analysis of vulnerabilities in appc and docker containers. By [@coreos][CoreOS] * [docker-bench-security](https://github.com/docker/docker-bench-security) - script that checks for dozens of common best-practices around deploying Docker containers in production. By [@docker][docker] * [notary](https://github.com/docker/notary) - a server and a client for running and interacting with trusted collections. By [@docker][docker] @@ -632,6 +633,7 @@ Services to securely store your Docker images. [gondor]: https://github.com/gondor [grammarly]: https://github.com/grammarly [ianmiell]: https://github.com/ianmiell +[inspec]: https://github.com/chef/inspec [JensPiegsa]: https://github.com/JensPiegsa [jessblog]: https://blog.jessfraz.com/post/docker-containers-on-the-desktop/ [jessvid]: https://www.youtube.com/watch?v=1qlLUf7KtAw