Assess Vagrant Box Security with cnspec

Use cnspec to scan running Vagrant virtual machines for security misconfigurations, CVEs, and policy violations. cnspec connects to Vagrant boxes over SSH using the VM's connection details.

Prerequisites

To scan Vagrant boxes with cnspec, you must have:

• cnspec installed on your workstation
• Vagrant installed
• A running Vagrant virtual machine

Scan a Vagrant box

To scan a running Vagrant box, provide the Vagrant machine name (or ID):

cnspec scan vagrant HOST

For example, to scan the default machine in the current Vagrant project directory:

cnspec scan vagrant default

Explore interactively

To open an interactive cnspec shell connected to a Vagrant box:

cnspec shell vagrant default

Connection options

Learn more

• To learn more about how the MQL query language works, read Write Effective MQL.