| [Unit] | |
| Description=Run CIS Scanner with given environment variables | |
| [Service] | |
| EnvironmentFile=-/etc/cis-scanner/env_vars | |
| Type=simple | |
| # fluentd logging agent was deprecated so checking for | |
| # stackdriver-correct-container is no longer required. | |
| # Opt out of the benchmark until the upstream catches up. | |
| ExecStart=/usr/bin/cis_scanner \ | |
| --config="${CONFIG}" \ | |
| --result="${RESULT}" \ | |
| --max-cis-profile-level="${LEVEL}" \ | |
| --show-compliant-benchmarks=true \ | |
| "${EXTRA_OPTIONS}" | |
| [Install] | |
| WantedBy=multi-user.target |