Chef InSpec is an open-source framework for testing and auditing your applications and infrastructure. It compares the actual state of your system with the desired state that you express in easy-to-read and easy-to-write Chef InSpec code. It detects violations and displays findings in the form of a report, but puts you in control of remediation. Chef InSpec is a run-time framework and rule language used to specify compliance, security, and policy requirements. It includes a collection of resources that help you write auditing controls quickly and easily.
What's new in 6.8.24.1
New Features - Deprecation notice about moving core resource packs to their individual gems after the next major release (#7219) - Added the --legacy flag to the inspec automate upload command. (#7200) The inspec automate upload command runs inspec check and inspec export, which were updated in Chef InSpec 5.22.36. This update led to a bug with InSpec profiles with =begin =end. Use the --legacy flag with profiles where the newer export and check methods may fail to parse older profiles correctly, particularly due to limitations in AST parsing. CVEs - Fixes HTTP Request Smuggling in ruby webrick CVE-2024-47220. (#7214) - Fixes the REXML denial of service vulnerability CVE-2024-43398. (#7199) - Fixes the REXML ReDoS vulnerability CVE-2024-49761. (#7199) Improvements - Use of a better cryptographic hashing algorithm on sensitive data. (#7261) - Improvements in the error handling of the plugin installation error. (#7161) - Fixed the encoding issues with special characters in passwords for Postgres Session resource (#7277)
InSpec is proprietary software from "Chef Software, Inc <[email protected]>". Check the publisher's license terms for pricing and usage rights.
What is the latest version of InSpec?
The latest version is 6.8.24.1, released on Jan 29, 2025.
Is it safe to download InSpec?
The download button links to the official installer published on packages.chef.io, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with a4c095c1bf72dee75c66f63f001a45306c256fdcd5220faf7fbb71ba3cbc7ae7.
Which Windows versions does InSpec support?
InSpec runs on Windows and is available for 64-bit (x64) systems.
How do I install InSpec silently?
Run the offline installer with msiexec /i "inspec-6.8.24-1-x64.msi" /quiet /norestart, or install it with Windows Package Manager: winget install --id=ChefSoftware.Inspec -e --silent.
How do I uninstall InSpec?
Open Settings › Apps › Installed apps, find InSpec and select Uninstall. From the command line, run winget uninstall --id=ChefSoftware.Inspec -e.
Alternatives to InSpec
Other Development kits programs for Windows from different developers.
