Let's say I have a number of tools like Docker bench security, some static security scanners, etc. Now I have let's say free Ansible edition (no expenses are considered).

I have lots of logs, but not much automated, actionable info that triggers scripts. What is a proper way to automate link between static scanners and CM tools like Ansible and Jenkins?

Should it go like:

  1. Parse logs for set of errors and then automatically trigger "correcting scripts"?
  2. Just run a playbook once in a while as it checks the state before doing anything?
  3. Use tools/plugins for Ansible?
  4. Something else?
  • With respect to Tools, not policy there will be more proper ways depending on the use-case. – Vladimir Botka Aug 4 '18 at 5:14
  • It sounds like what you are describing here is automated remediation not automated configuration management. – Bruce Becker Oct 22 '18 at 15:13

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.