Supply Chain
Assess Vagrant Box Security with cnspec
Scan Vagrant virtual machines for security misconfigurations and vulnerabilities using cnspec.
Validate Vagrant development environments against the same security policies you enforce in production. cnspec connects to Vagrant boxes over SSH, so you can catch misconfigurations and CVEs in local VMs before promoting images or configurations upstream.
Prerequisites
To scan Vagrant boxes with cnspec, you must have:
- cnspec installed on your workstation
- Vagrant installed
- A running Vagrant virtual machine
Scan a Vagrant box
To scan a running Vagrant box, provide the Vagrant machine name (or ID):
cnspec scan vagrant HOSTFor example, to scan the default machine in the current Vagrant project directory:
cnspec scan vagrant defaultExplore interactively
To open an interactive cnspec shell connected to a Vagrant box:
cnspec shell vagrant defaultConnection options
| Option | Description |
|---|---|
HOST | Vagrant machine name or ID |
--insecure, -k | Skip TLS certificate verification |
Learn more
- To learn more about how the MQL query language works, read Write Effective MQL.