docs(queries): update queries catalog

Checkmarx · Feb 27, 2024 · e3cca35 · e3cca35
1 parent 6b9fa67
commit e3cca35
Show file tree

Hide file tree

Showing 73 changed files with 5,563 additions and 4,280 deletions.
diff --git a/docs/queries/all-queries.md b/docs/queries/all-queries.md
diff --git a/docs/queries/ansible-queries.md b/docs/queries/ansible-queries.md
diff --git a/docs/queries/ansible-queries/aws/2d55ef88-b616-4890-b822-47f280763e89.md b/docs/queries/ansible-queries/aws/2d55ef88-b616-4890-b822-47f280763e89.md
diff --git a/docs/queries/ansible-queries/aws/309edc5b-5a59-42b4-a357-d4d098311fd4.md b/docs/queries/ansible-queries/aws/309edc5b-5a59-42b4-a357-d4d098311fd4.md
@@ -23,7 +23,7 @@ hide:
 -   **URL:** [Github](https://github.com/Checkmarx/kics/tree/master/assets/queries/ansible/aws/s3_bucket_sse_disabled)
 
 ### Description
-If algorithm is AES256 then the master key is null, empty or undefined, otherwise the master key is required<br>
+If master key is null, empty of undefined, then SSE algorithm should be AES25. Conversely, if SSE algorithm is AES256, then master key should be null, empty or undefined.<br>
 [Documentation](https://docs.ansible.com/ansible/latest/collections/amazon/aws/s3_bucket_module.html#parameter-encryption_key_id)
 
 ### Code samples

diff --git a/docs/queries/ansible-queries/common/c05e2c20-0a2c-4686-b1f8-5f0a5612d4e8.md b/docs/queries/ansible-queries/common/c05e2c20-0a2c-4686-b1f8-5f0a5612d4e8.md
@@ -53,43 +53,43 @@ Setting state to latest performs an update and installs additional packages poss
         name: sudo
         state: latest
         update_only: false
-    
+
     - name: Install nmap
       community.general.zypper:
         name: nmap
         state: latest
-        
+
     - name: Install package without using cache
       community.general.apk:
         name: foo
         state: latest
         no_cache: true
-      
+
     - name: Install apache httpd
       ansible.builtin.apt:
         name: apache2
         state: latest
-    
+
     - name: Update Gemfile in another directory
       community.general.bundler:
         state: latest
         chdir: ~/rails_project
-    
+
     - name: Install a modularity appstream with defined profile
       ansible.builtin.dnf:
-        name: '@postgresql/client'
+        name: "@postgresql/client"
         state: latest
-    
+
     - name: Install rake
       community.general.gem:
         name: rake
         state: latest
-    
+
     - name: Install formula foo with 'brew' from cask
       community.general.homebrew:
         name: homebrew/cask/foo
         state: latest
-      
+
     - name: Install Green Balls plugin
       community.general.jenkins_plugin:
         name: greenballs
@@ -98,86 +98,87 @@ Setting state to latest performs an update and installs additional packages poss
         username: user_jenkins
         password: userpass_jenkins
       register: result
-    
+
     - name: Install packages based on package.json
       community.general.npm:
         path: /app/location
         state: latest
-    
+
     - name: Install nmap
       community.general.openbsd_pkg:
         name: nmap
         state: latest
-    
+
     - name: Install ntpdate
       ansible.builtin.package:
         name: ntpdate
         state: latest
-    
+
     - name: Install package bar from file
       community.general.pacman:
         name: ~/bar-1.0-1-any.pkg.tar.xz
         state: latest
-    
+
     - name: Install finger daemon
       community.general.pkg5:
         name: service/network/finger
         state: latest
-    
+
     - name: Install several packages
       community.general.pkgutil:
         name:
-        - CSWsudo
-        - CSWtop
+          - CSWsudo
+          - CSWtop
         state: latest
-    
+
     - name: Install package foo
       community.general.portage:
         package: foo
         state: latest
-    
+
     - name: Make sure that it is the most updated package
       community.general.slackpkg:
         name: foo
         state: latest
-      
+
     - name: Make sure spell foo is installed
       community.general.sorcery:
         spell: foo
         state: latest
-    
+
     - name: Install package unzip
       community.general.swdepot:
         name: unzip
         state: latest
-        depot: 'repository:/path'
-    
+        depot: "repository:/path"
+
     - name: Install multiple packages
       win_chocolatey:
         name:
-        - procexp
-        - putty
-        - windirstat
+          - procexp
+          - putty
+          - windirstat
         state: latest
-    
+
     - name: Install "imagemin" node.js package globally.
       community.general.yarn:
         name: imagemin
         global: true
         state: latest
-    
+
     - name: Install a list of packages (suitable replacement for 2.11 loop deprecation warning)
       ansible.builtin.yum:
         name:
           - nginx
           - postgresql
           - postgresql-server
         state: latest
-    
+
     - name: Install local rpm file
       community.general.zypper:
         name: /tmp/fancy-software.rpm
         state: latest
+
 ```
 
 
@@ -203,43 +204,43 @@ Setting state to latest performs an update and installs additional packages poss
         name: sudo
         state: latest
         update_only: true
-    
+
     - name: Install nmap
       community.general.zypper:
         name: nmap
         state: present
-        
+
     - name: Install package without using cache
       community.general.apk:
         name: foo
         state: present
         no_cache: true
-      
+
     - name: Install apache httpd
       ansible.builtin.apt:
         name: apache2
         state: present
-    
+
     - name: Update Gemfile in another directory
       community.general.bundler:
         state: present
         chdir: ~/rails_project
-    
+
     - name: Install a modularity appstream with defined profile
       ansible.builtin.dnf:
-        name: '@postgresql/client'
+        name: "@postgresql/client"
         state: present
-    
+
     - name: Install rake
       community.general.gem:
         name: rake
         state: present
-    
+
     - name: Install formula foo with 'brew' from cask
       community.general.homebrew:
         name: homebrew/cask/foo
         state: present
-      
+
     - name: Install Green Balls plugin
       community.general.jenkins_plugin:
         name: greenballs
@@ -249,88 +250,89 @@ Setting state to latest performs an update and installs additional packages poss
         username: user_jenkins
         password: userpass_jenkins
       register: result
-    
+
     - name: Install packages based on package.json
       community.general.npm:
         path: /app/location
         state: present
-    
+
     - name: Install nmap
       community.general.openbsd_pkg:
         name: nmap
         state: present
-    
+
     - name: Install ntpdate
       ansible.builtin.package:
         name: ntpdate
         state: present
-    
+
     - name: Install package bar from file
       community.general.pacman:
         name: ~/bar-1.0-1-any.pkg.tar.xz
         state: present
-    
+
     - name: Install package bar from file
       community.general.pacman:
         name: ~/bar-1.0-1-any.pkg.tar.xz
         state: present
-    
+
     - name: Install finger daemon
       community.general.pkg5:
         name: service/network/finger
         state: present
-    
+
     - name: Install several packages
       community.general.pkgutil:
         name:
-        - CSWsudo
-        - CSWtop
+          - CSWsudo
+          - CSWtop
         state: present
-    
+
     - name: Install package foo
       community.general.portage:
         package: foo
         state: present
-    
+
     - name: Make sure that it is the most updated package
       community.general.slackpkg:
         name: foo
         state: present
-      
+
     - name: Make sure spell foo is installed
       community.general.sorcery:
         spell: foo
         state: present
-    
+
     - name: Install package unzip
       community.general.swdepot:
         name: unzip
         state: present
-        depot: 'repository:/path'
-    
+        depot: "repository:/path"
+
     - name: Install multiple packages
       win_chocolatey:
         name:
-        - procexp
-        - putty
-        - windirstat
+          - procexp
+          - putty
+          - windirstat
         state: present
-    
+
     - name: Install "imagemin" node.js package globally.
       community.general.yarn:
         name: imagemin
         global: true
-    
+
     - name: Install a list of packages (suitable replacement for 2.11 loop deprecation warning)
       ansible.builtin.yum:
         name:
           - nginx
           - postgresql
           - postgresql-server
         state: present
-    
+
     - name: Install local rpm file
       community.general.zypper:
         name: /tmp/fancy-software.rpm
         state: present
+
 ```