InSpec

A standalone path through Chef InSpec, the framework for expressing security and compliance as executable code. Beginner covers the idea of compliance as code, installing InSpec, the control/resource language, and running scans. Intermediate builds real profiles: resources and matchers, profile structure and inputs, inheritance and overlays, and remote/cloud targets. Advanced goes deep: CIS/DISA baselines and waivers, reporting and attestations, InSpec in CI/CD, and the landscape (OpenSCAP, OSQuery). Real controls and CLI output throughout; each level ends with a self-test feeding a rotating final exam.