✨ Implement Chef InSpec Parser

[manuel-sommer]

see issue #6990

[dryrunsecurity]

Contextual Security Analysis

As DryRun Security performs checks, we’ll summarize them here. You can always dive into the detailed results in the section below for checks.

Status	DryRun Security Check
✅	AI-powered Sensitive Function Check
✅	Configured Sensitive Files Check
✅	AI-powered Sensitive Files Check

Chat with your AI-powered Security Buddy by typing @dryrunsecurity followed by your question into a comment.
Example: @dryrunsecurity What are common security issues with web application cookies?

Install and configure more repositories at DryRun Security

[mtesauro]

Approved

[cneill]

A couple notes on this one...

[manuel-sommer]

Thank you for the review @cneill. I fixed your issues.

[cneill]

Thanks! Approved

Approved too quickly

[manuel-sommer]

I can't see your comment @Maffooch that you approve this.

[manuel-sommer]

Done

[MirceaLutic]

The outputs of Chef Inspec are called "reporters". These include json format but no "logs".
How do I convert any output from inspec to the logs that dojo accepts?

[manuel-sommer]

I never used Chef Ispec Parser, just fulfilled the PR according to the linked issue description.

[mtesauro]

@MirceaLutic I've never used Chef Inspect either but looking at the unit test files:
https://github.com/DefectDojo/django-DefectDojo/tree/master/unittests/scans/chefinspect
They appear to be JSON files with .log extensions.

I'd suggest you compare the structure of what you're seeing to those unit test file. I may be as simple as changing the file extension 🤷