Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

update(query): add CWE infos to terraform queries #7187

Merged
merged 11 commits into from
Sep 18, 2024
Merged

update(query): add CWE infos to terraform queries #7187

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
c92c5c5
add CWE infos to terraform queries
ArturRibeiro-CX Jul 4, 2024
70a0904
Merge branch 'master' into AST-45283-Terraform
ArturRibeiro-CX Jul 4, 2024
a0b9b24
add cwe info to terraform aws queries
ArturRibeiro-CX Jul 5, 2024
ad9fb2d
Merge branch 'master' into AST-45283-Terraform
ArturRibeiro-CX Jul 5, 2024
8cea731
add cwe field to e2e
ArturRibeiro-CX Jul 5, 2024
bd6b779
Merge branch 'master' into AST-45283-Terraform
cx-ruiaraujo Jul 22, 2024
cea5b8c
Merge branch 'master' into AST-45283-Terraform
cx-ruiaraujo Jul 25, 2024
35e3112
Merge branch 'master' into AST-45283-Terraform
ArturRibeiro-CX Aug 16, 2024
ee7929d
Merge branch 'master' into AST-45283-Terraform
ArturRibeiro-CX Sep 13, 2024
536a9da
Merge branch 'master' into AST-45283-Terraform
ArturRibeiro-CX Sep 18, 2024
630ffdd
add cwe infos to 2 missing queries
ArturRibeiro-CX Sep 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/action_trail_logging_all_regions_disabled/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "72180b32",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "778"
}
2 changes: 1 addition & 1 deletion ...ries/terraform/alicloud/actiontrail_trail_oss_bucket_is_publicly_accessible/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "0b91a8b5",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "668"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/alb_listening_on_http/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "75d71dc8",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "319",
"oldSeverity": "HIGH"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/api_gateway_api_protocol_not_https/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "31f4c870",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "319",
"oldSeverity": "HIGH"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/cmk_is_unusable/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "52a5ea7c",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "693"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/cs_kubernetes_node_pool_auto_repair_disabled/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "3096639c",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "693"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/disk_encryption_disabled/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "68bbdfee",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "311"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/ecs_data_disk_kms_key_id_undefined/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "04c57e20",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "311"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/high_kms_key_rotation_period/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "7961c2d3",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "311"
}
2 changes: 1 addition & 1 deletion .../terraform/alicloud/kubernetes_cluster_without_terway_as_cni_network_plugin/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "7c27643e",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "693",
"oldSeverity": "MEDIUM"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/launch_template_is_not_encrypted/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "e9336717",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "311"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/log_retention_is_not_greater_than_90_days/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "11d4fc85",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "778",
"oldSeverity": "MEDIUM"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/nas_file_system_not_encrypted/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "fb3675d5",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "311"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/nas_file_system_without_kms/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "5fb1326b",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "311"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/no_ros_stack_policy/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "199b3f61",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "829"
}
2 changes: 1 addition & 1 deletion ...ueries/terraform/alicloud/oss_bucket_allows_all_actions_from_all_principals/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "5507d429",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "284",
"oldSeverity": "HIGH"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/oss_bucket_allows_delete_from_all_principals/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "ee07e6f5",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "732",
"oldSeverity": "HIGH"
}
2 changes: 1 addition & 1 deletion ...ueries/terraform/alicloud/oss_bucket_allows_list_action_from_all_principals/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "b22a7d83",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "200"
}
2 changes: 1 addition & 1 deletion ...queries/terraform/alicloud/oss_bucket_allows_put_action_from_all_principals/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "14d65676",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "732",
"oldSeverity": "HIGH"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/oss_bucket_cmk_encryption_disabled/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "5907ee8c",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "311"
}
4 changes: 2 additions & 2 deletions assets/queries/terraform/alicloud/oss_bucket_has_static_website/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,10 +3,10 @@
"queryName": "OSS Bucket Has Static Website",
"severity": "HIGH",
"category": "Insecure Configurations",
"descriptionText": "Checks if any static websties are hosted on buckets. Be aware of any website you are running.",
"descriptionText": "Checks if any static websites are hosted on buckets. Be aware of any website you are running.",
"descriptionUrl": "https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/oss_bucket#website",
"platform": "Terraform",
"descriptionID": "4c0903ce",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "200"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/oss_bucket_ip_restriction_disabled/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "93cebe21",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "285"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/oss_bucket_lifecycle_disabled/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "66609561",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "664"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/oss_bucket_logging_disabled/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "c4a5fdbb",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "778"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/oss_bucket_public_access_enabled/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "d8096622",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "284"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/oss_bucket_transfer_acceleration_disabled/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "19899aaa",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "693"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/oss_bucket_versioning_disabled/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "749f1287",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "710"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/oss_buckets_securetransport_disabled/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "2b43b0a7",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "326",
"oldSeverity": "HIGH"
}
2 changes: 1 addition & 1 deletion ...ueries/terraform/alicloud/public_security_group_rule_all_ports_or_protocols/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "6dcb70e8",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "284"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/public_security_group_rule_sensitive_port/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,5 +9,5 @@
"descriptionID": "717c49e0",
"aggregation": 63,
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "284"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/public_security_group_rule_unknown_port/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "a2097952",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "284",
"oldSeverity": "MEDIUM"
}
2 changes: 1 addition & 1 deletion ...aform/alicloud/ram_account_password_policy_max_login_attempts_unrecommended/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "6a2e9c34",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "307",
"oldSeverity": "HIGH"
}
2 changes: 1 addition & 1 deletion ...rraform/alicloud/ram_account_password_policy_max_password_age_unrecommended/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "6056f5ca",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "521"
}
2 changes: 1 addition & 1 deletion .../terraform/alicloud/ram_account_password_policy_not_required_minimum_length/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "a8b47743",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "521",
"oldSeverity": "HIGH"
}
2 changes: 1 addition & 1 deletion ...queries/terraform/alicloud/ram_account_password_policy_not_required_numbers/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "0ee40b1d",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "521",
"oldSeverity": "MEDIUM"
}
2 changes: 1 addition & 1 deletion ...queries/terraform/alicloud/ram_account_password_policy_not_required_symbols/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "f3616c34",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "521",
"oldSeverity": "MEDIUM"
}
2 changes: 1 addition & 1 deletion ...ies/terraform/alicloud/ram_account_password_policy_without_reuse_prevention/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "2210f1f7",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "521"
}
2 changes: 1 addition & 1 deletion ...d/ram_password_security_policy_not_require_at_least_one_lowercase_character/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "b482b843",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "521",
"oldSeverity": "MEDIUM"
}
2 changes: 1 addition & 1 deletion ...d/ram_password_security_policy_not_require_at_least_one_uppercase_character/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "5adbc73e",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "521",
"oldSeverity": "MEDIUM"
}
2 changes: 1 addition & 1 deletion ...rraform/alicloud/ram_policy_admin_access_not_attached_to_users_groups_roles/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "d529825f",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "285",
"oldSeverity": "HIGH"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/ram_policy_attached_to_user/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,5 +8,5 @@
"platform": "Terraform",
"descriptionID": "c3be65a4",
"cloudProvider": "alicloud",
"cwe": ""
"cwe": "284"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/ram_security_preference_not_enforce_mfa/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "6131e90d",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "287",
"oldSeverity": "HIGH"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/rds_instance_address_publicly_accessible/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "d23dc3f9",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "668",
"oldSeverity": "HIGH"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/rds_instance_events_not_logged/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "c731d8ad",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "778",
"oldSeverity": "HIGH"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/rds_instance_log_connections_disabled/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "0a96bec0",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "778",
"oldSeverity": "LOW"
}
2 changes: 1 addition & 1 deletion assets/queries/terraform/alicloud/rds_instance_log_disconnections_disabled/metadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,6 @@
"platform": "Terraform",
"descriptionID": "67ec659b",
"cloudProvider": "alicloud",
"cwe": "",
"cwe": "778",
"oldSeverity": "LOW"
}
Loading
Loading