Steampunk Spotter - RHEL 9 Certified

Spotter’s Playbook Scanning feature performs a comprehensive, in-depth analysis of playbooks. It’s like having an Ansible expert review your playbooks for compliance and guide you through the process of improving them when needed. Steampunk Spotter stands out for its exceptional ability to identify hard-to-catch errors and time-consuming issues in your Ansible playbooks. Spotter also provides the option to rewrite your Ansible content with suggested changes in a flash.

Spotter ensures playbook adherence to best practices, security, and compliance through a combination of pre-built and customizable checks. Spotter checks include: Best practices checks, Upgrade checks, Security checks, Validation checks, Environment checks, Custom checks.

The Supply Chain Management feature allows you to control which third-party dependencies of your Ansible automation are allowed to be installed or used, including blocking certain Ansible modules or collections and enforcing approved Python versions. By enforcing policies on approved components, you can protect your infrastructure from vulnerabilities, reduce the risk of unauthorized access, and ensure consistency and compliance across your Ansible playbooks. This feature also helps maintain a clear audit trail of all content used, simplifying compliance reporting and risk assessments.

SBOM provides a comprehensive inventory of all dependencies and identifies and evaluates any vulnerabilities present within the execution environment in which your playbooks are executed. It helps you gain visibility into collection dependencies and potential vulnerabilities, enabling you to decide which execution environments are safe to use. Building upon the extracted SBOM from your Ansible playbooks, collections, and execution environments, Spotter evaluates them for known vulnerabilities and compiles the findings into actionable information. You can use dynamic Security Reports for Ansible Collections to assess weaknesses and decide whether or not to use a particular execution environment.

With AI-Powered Compliance Validation, you can easily apply custom policies tailored to specific compliance standards and benchmarks (like CIS RHEL and AWS) to your playbooks with just a few clicks. You can use AI-powered compliance validation to automatically validate and improve your Ansible Playbooks, test content pipelines, and deploy versioned content to meet specific standards and enforce governance standards and implement regulatory initiatives. 

Spotter Custom Policy Editor allows you to create and edit your own policies directly on the platform. This new feature allows you to enforce internal standards and ensure that your playbooks are in line with organizational, compliance, and security requirements. It simplifies policy management by eliminating manual intervention, reducing the time spent on corrections and reviews. 

Analytics and Reporting feature allows you to analyze scan data, identify trends, and monitor progress over time. By creating custom reports, you gain comprehensive visibility into the overall state of your automation, helping you make informed decisions and continuously improve security, quality, and compliance.