Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs(queries): update queries catalog #6856

Merged
merged 2 commits into from
Feb 29, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3,591 changes: 1,796 additions & 1,795 deletions docs/queries/all-queries.md

Large diffs are not rendered by default.

509 changes: 254 additions & 255 deletions docs/queries/ansible-queries.md

Large diffs are not rendered by default.

This file was deleted.

Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ hide:
- **URL:** [Github](https://github.com/Checkmarx/kics/tree/master/assets/queries/ansible/aws/s3_bucket_sse_disabled)

### Description
If algorithm is AES256 then the master key is null, empty or undefined, otherwise the master key is required<br>
If the master key is null, empty, or undefined, then the SSE algorithm should be AES256. Conversely, if the SSE algorithm is AES256, then the master key should be null, empty, or undefined.<br>
[Documentation](https://docs.ansible.com/ansible/latest/collections/amazon/aws/s3_bucket_module.html#parameter-encryption_key_id)

### Code samples
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -53,43 +53,43 @@ Setting state to latest performs an update and installs additional packages poss
name: sudo
state: latest
update_only: false

- name: Install nmap
community.general.zypper:
name: nmap
state: latest

- name: Install package without using cache
community.general.apk:
name: foo
state: latest
no_cache: true

- name: Install apache httpd
ansible.builtin.apt:
name: apache2
state: latest

- name: Update Gemfile in another directory
community.general.bundler:
state: latest
chdir: ~/rails_project

- name: Install a modularity appstream with defined profile
ansible.builtin.dnf:
name: '@postgresql/client'
name: "@postgresql/client"
state: latest

- name: Install rake
community.general.gem:
name: rake
state: latest

- name: Install formula foo with 'brew' from cask
community.general.homebrew:
name: homebrew/cask/foo
state: latest

- name: Install Green Balls plugin
community.general.jenkins_plugin:
name: greenballs
Expand All @@ -98,86 +98,87 @@ Setting state to latest performs an update and installs additional packages poss
username: user_jenkins
password: userpass_jenkins
register: result

- name: Install packages based on package.json
community.general.npm:
path: /app/location
state: latest

- name: Install nmap
community.general.openbsd_pkg:
name: nmap
state: latest

- name: Install ntpdate
ansible.builtin.package:
name: ntpdate
state: latest

- name: Install package bar from file
community.general.pacman:
name: ~/bar-1.0-1-any.pkg.tar.xz
state: latest

- name: Install finger daemon
community.general.pkg5:
name: service/network/finger
state: latest

- name: Install several packages
community.general.pkgutil:
name:
- CSWsudo
- CSWtop
- CSWsudo
- CSWtop
state: latest

- name: Install package foo
community.general.portage:
package: foo
state: latest

- name: Make sure that it is the most updated package
community.general.slackpkg:
name: foo
state: latest

- name: Make sure spell foo is installed
community.general.sorcery:
spell: foo
state: latest

- name: Install package unzip
community.general.swdepot:
name: unzip
state: latest
depot: 'repository:/path'
depot: "repository:/path"

- name: Install multiple packages
win_chocolatey:
name:
- procexp
- putty
- windirstat
- procexp
- putty
- windirstat
state: latest

- name: Install "imagemin" node.js package globally.
community.general.yarn:
name: imagemin
global: true
state: latest

- name: Install a list of packages (suitable replacement for 2.11 loop deprecation warning)
ansible.builtin.yum:
name:
- nginx
- postgresql
- postgresql-server
state: latest

- name: Install local rpm file
community.general.zypper:
name: /tmp/fancy-software.rpm
state: latest

```


Expand All @@ -203,43 +204,43 @@ Setting state to latest performs an update and installs additional packages poss
name: sudo
state: latest
update_only: true

- name: Install nmap
community.general.zypper:
name: nmap
state: present

- name: Install package without using cache
community.general.apk:
name: foo
state: present
no_cache: true

- name: Install apache httpd
ansible.builtin.apt:
name: apache2
state: present

- name: Update Gemfile in another directory
community.general.bundler:
state: present
chdir: ~/rails_project

- name: Install a modularity appstream with defined profile
ansible.builtin.dnf:
name: '@postgresql/client'
name: "@postgresql/client"
state: present

- name: Install rake
community.general.gem:
name: rake
state: present

- name: Install formula foo with 'brew' from cask
community.general.homebrew:
name: homebrew/cask/foo
state: present

- name: Install Green Balls plugin
community.general.jenkins_plugin:
name: greenballs
Expand All @@ -249,88 +250,89 @@ Setting state to latest performs an update and installs additional packages poss
username: user_jenkins
password: userpass_jenkins
register: result

- name: Install packages based on package.json
community.general.npm:
path: /app/location
state: present

- name: Install nmap
community.general.openbsd_pkg:
name: nmap
state: present

- name: Install ntpdate
ansible.builtin.package:
name: ntpdate
state: present

- name: Install package bar from file
community.general.pacman:
name: ~/bar-1.0-1-any.pkg.tar.xz
state: present

- name: Install package bar from file
community.general.pacman:
name: ~/bar-1.0-1-any.pkg.tar.xz
state: present

- name: Install finger daemon
community.general.pkg5:
name: service/network/finger
state: present

- name: Install several packages
community.general.pkgutil:
name:
- CSWsudo
- CSWtop
- CSWsudo
- CSWtop
state: present

- name: Install package foo
community.general.portage:
package: foo
state: present

- name: Make sure that it is the most updated package
community.general.slackpkg:
name: foo
state: present

- name: Make sure spell foo is installed
community.general.sorcery:
spell: foo
state: present

- name: Install package unzip
community.general.swdepot:
name: unzip
state: present
depot: 'repository:/path'
depot: "repository:/path"

- name: Install multiple packages
win_chocolatey:
name:
- procexp
- putty
- windirstat
- procexp
- putty
- windirstat
state: present

- name: Install "imagemin" node.js package globally.
community.general.yarn:
name: imagemin
global: true

- name: Install a list of packages (suitable replacement for 2.11 loop deprecation warning)
ansible.builtin.yum:
name:
- nginx
- postgresql
- postgresql-server
state: present

- name: Install local rpm file
community.general.zypper:
name: /tmp/fancy-software.rpm
state: present

```
Loading
Loading