Chef Ideas

As an organization consuming the Audit cookbook for running InSpec compliance checks, I would like to move to the new Compliance Phase which has been introduced. Currently we have a number of profiles which run across our fleet and are using the interval attribute of the Audit cookbook to limit the amount of scans which run since they can be time-consuming to run full benchmark scans of systems and we want to restrict the data growth of what is reported to Chef Automate.

Please support the interval attribute set for Compliance phase so that scans can be scheduled to not trigger on every Chef Infra Client run and can be set on a periodic basis.

# control how often inspec scans are run, if not on every node converge
# notes: false value will result in running inspec scan every converge
default['audit']['interval']['enabled'] = false

# controls how often inspec scans are run (in minutes)
# notes: only used if interval is enabled above
default['audit']['interval']['time'] = 1440