After creating your custom checks and benchmarks, you can create a custom content library.
Procedure
- Open the command line and navigate to the Custom Content SDK root directory.
- To build your custom content library, run the ./secops_sdk build -a command.
After running the command, the SDK root directory includes the
_dist subdirectory and two
tar.gz files you can use to import your custom content.
- To import your content, click from the side menu.
- Under Compliance Content - SaltStack, click Check for updates.
- Click Upload Package and select the tar.gz file.
Note: To make your custom checks easier to navigate, use the file containing a timestamp in the filename. You can also import content using the API (RaaS), or alternatively, through the command line during installation. See Sec API interface or the
SaltStack Config Installation documentation.
Results
Your custom content is available in SaltStack SecOps Compliance for building policies, running assessments, and remediating your systems.