Support for Chef InSpec

[LOLCATATONIA]

Please support integration with Chef InSpec. I thought it was already supported, but I can't find it listed on https://github.com/DefectDojo/django-DefectDojo/tree/master/dojo/tools ?

[mtesauro]

@LOLCATATONIA Do you have an example output file from Chef InSpec you can share? If so adding it to this repo - https://github.com/DefectDojo/sample-scan-files is a great way to assist getting a new parser added to DefectDojo.

The example file doesn't have to have 'real' data in it - just have reasonable data and keeps the structure of the tools output. For example, I added a BugCrowd file to that repo but have never worked for 'BigCorp'. I simply took legit output from a tool and removed/re-wrote anything that might identify the actual source. Some contributors have scanned open source / known vulnerable apps (OWASP JuiceShop) to produce output files as well.

HTH

[LOLCATATONIA]

inspec_audit.log

Here's a sample file. I had trouble pulling that repo.

[manuel-sommer]

This issue can be closed @mtesauro