Build Systems that Drive Business
June 11–12, 2018: Training
June 12–14, 2018: Tutorials & Conference
San Jose, CA

Introduction to continuous compliance and remediation

Nathen Harvey (Chef)
9:00am–12:30pm Tuesday, June 12, 2018
Location: LL21 A/B Level: Beginner
Secondary topics: Resilient, Performant & Secure Distributed Systems
Average rating: ****.
(4.67, 6 ratings)

Prerequisite knowledge

  • Ability to write code (of just about any flavor) in a text editor and use the command line
  • A basic understanding of system administration (installing packages, configuring those packages, starting a service, etc.)

Materials or downloads needed in advance

  • A WiFi-enabled laptop with an SSH client (PuTTY on Windows) and the interactive text editor of your choice (vi/Vim, Emacs, or Nano) installed

What you'll learn

  • Learn how to easily integrate automated tests that check for adherence to policy into any stage of your deployment pipeline


Success with DevOps can be measured with a number of different metrics. How frequently are systems audited for compliance to various policies? How long does it take to remediate a failing control or vulnerability?

Join Nathen Harvey to learn how to easily integrate automated tests that check for adherence to policy into any stage of your deployment pipeline, using InSpec—an open source testing framework for infrastructure—for compliance and Chef—an open source framework for infrastructure automation—for remediation. You’ll gain an introduction to the practice of continuous compliance and remediation.

Topics include:

  • Running InSpec locally on a machine
  • Running InSpec on a remote machine
  • Using InSpec in the Chef cookbook development process for integration testing
  • Executing an InSpec test on a local machine
  • Executing an InSpec test on a remote machine
  • Generating an InSpec profile
  • Adding InSpec-based integration test to a Chef cookbook
  • Running InSpec-based integrations tests during Chef cookbook development
Photo of Nathen Harvey

Nathen Harvey


Nathen Harvey is vice president of community at Chef, where he helps the community whip up an awesome ecosystem built around the Chef platform. Nathen also spends much of his time helping people learn about the practices, processes, and technologies that support DevOps, continuous delivery, and high-velocity organizations. Previously, Nathen spent a number of years managing operations and infrastructure for a diverse range of web applications. Nathen is a cohost of the Food Fight Show, a podcast about Chef and DevOps. He is also an occasional farmer who loves eggs and actively supports #hugops.