Version

.gitignore

@@ -1,2 +1,4 @@
 log/*
 *.swp*
+.vagrant/
+Vagrantfile

README.md

@@ -2,7 +2,7 @@
 
 ![Docker Bench for Security running](img/benchmark_log.png)
 
-The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the [CIS Docker Benchmark v1.3.1](https://www.cisecurity.org/benchmark/docker/).
+The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the [CIS Docker Benchmark v1.4.0](https://www.cisecurity.org/benchmark/docker/).
 
 We are making this available as an open-source utility so the Docker community can have an easy way to self-assess their hosts and docker containers against this benchmark.
 

docker-bench-security.sh

@@ -2,7 +2,7 @@
 # --------------------------------------------------------------------------------------------
 # Docker Bench for Security
 #
-# Docker, Inc. (c) 2015-2021
+# Docker, Inc. (c) 2015-2022
 #
 # Checks for dozens of common best-practices around deploying Docker containers in production.
 # --------------------------------------------------------------------------------------------
@@ -36,7 +36,7 @@ usage () {
   cat <<EOF
 Docker Bench for Security - Docker, Inc. (c) 2015-$(date +"%Y")
 Checks for dozens of common best-practices around deploying Docker containers in production.
-Based on the CIS Docker Benchmark 1.3.1.
+Based on the CIS Docker Benchmark 1.4.0.
 
 Usage: ${myname}.sh [OPTIONS]
 

functions/functions_lib.sh

@@ -137,6 +137,7 @@ container_images() {
   check_4_9
   check_4_10
   check_4_11
+  check_4_12
   check_4_end
 }
 

functions/helper_lib.sh

@@ -145,6 +145,6 @@ yell "# ------------------------------------------------------------------------
 # Docker, Inc. (c) 2015-$(date +"%Y")
 #
 # Checks for dozens of common best-practices around deploying Docker containers in production.
-# Based on the CIS Docker Benchmark 1.3.1.
+# Based on the CIS Docker Benchmark 1.4.0.
 # --------------------------------------------------------------------------------------------"
 }