[Unit]
Description=Run CIS Scanner with given environment variables

[Service]
EnvironmentFile=-/etc/cis-scanner/env_vars
Type=simple
# NX feature is mandatory on ARMv8. Therefore, excluded this check from the scanning.
# COS ARM images use fluent-bit logging which is a native application which makes
# checking for stackdriver-correct-container unneccessary.
ExecStart=/usr/bin/cis_scanner \
          --config="${CONFIG}" \
	  --result="${RESULT}" \
	  --max-cis-profile-level="${LEVEL}" \
	  --show-compliant-benchmarks=true \
	  "${EXTRA_OPTIONS}"

[Install]
WantedBy=multi-user.target