Skip to content

Commit a9ee1bf

Browse files
ayajbaraactions-user
ayajbara
authored and
actions-user
committedApr 13, 2022
Merge pull request bridgecrewio#2727 from bridgecrewio/openapi_runner
OpenAPI runner
·
2.0.10612.0.1060
1 parent cb89a53 commit a9ee1bf

File tree

2 files changed

+80
-53
lines changed

2 files changed

+80
-53
lines changed
 

‎docs/5.Policy Index/all.md

+59-53
Original file line numberDiff line numberDiff line change
@@ -1967,59 +1967,65 @@ nav_order: 1
19671967
| 1956 | CKV2_OCI_1 | resource | oci_identity_group | Ensure administrator users are not associated with API keys | Terraform |
19681968
| 1957 | CKV2_OCI_1 | resource | oci_identity_user | Ensure administrator users are not associated with API keys | Terraform |
19691969
| 1958 | CKV2_OCI_1 | resource | oci_identity_user_group_membership | Ensure administrator users are not associated with API keys | Terraform |
1970-
| 1959 | CKV_OPENSTACK_1 | provider | openstack | Ensure no hard coded OpenStack password, token, or application_credential_secret exists in provider | Terraform |
1971-
| 1960 | CKV_OPENSTACK_2 | resource | openstack_compute_secgroup_v2 | Ensure no security groups allow ingress from 0.0.0.0:0 to port 22 (tcp / udp) | Terraform |
1972-
| 1961 | CKV_OPENSTACK_2 | resource | openstack_networking_secgroup_rule_v2 | Ensure no security groups allow ingress from 0.0.0.0:0 to port 22 (tcp / udp) | Terraform |
1973-
| 1962 | CKV_OPENSTACK_3 | resource | openstack_compute_secgroup_v2 | Ensure no security groups allow ingress from 0.0.0.0:0 to port 3389 (tcp / udp) | Terraform |
1974-
| 1963 | CKV_OPENSTACK_3 | resource | openstack_networking_secgroup_rule_v2 | Ensure no security groups allow ingress from 0.0.0.0:0 to port 3389 (tcp / udp) | Terraform |
1975-
| 1964 | CKV_OPENSTACK_4 | resource | openstack_compute_instance_v2 | Ensure that instance does not use basic credentials | Terraform |
1976-
| 1965 | CKV_OPENSTACK_5 | resource | openstack_fw_rule_v1 | Ensure firewall rule set a destination IP | Terraform |
1977-
| 1966 | CKV_PAN_1 | provider | panos | Ensure no hard coded PAN-OS credentials exist in provider | Terraform |
1978-
| 1967 | CKV_PAN_2 | resource | panos_management_profile | Ensure plain-text management HTTP is not enabled for an Interface Management Profile | Terraform |
1979-
| 1968 | CKV_PAN_3 | resource | panos_management_profile | Ensure plain-text management Telnet is not enabled for an Interface Management Profile | Terraform |
1980-
| 1969 | CKV_PAN_4 | resource | panos_security_policy | Ensure DSRI is not enabled within security policies | Terraform |
1981-
| 1970 | CKV_PAN_4 | resource | panos_security_rule_group | Ensure DSRI is not enabled within security policies | Terraform |
1982-
| 1971 | CKV_PAN_5 | resource | panos_security_policy | Ensure security rules do not have 'applications' set to 'any' | Terraform |
1983-
| 1972 | CKV_PAN_5 | resource | panos_security_rule_group | Ensure security rules do not have 'applications' set to 'any' | Terraform |
1984-
| 1973 | CKV_PAN_6 | resource | panos_security_policy | Ensure security rules do not have 'services' set to 'any' | Terraform |
1985-
| 1974 | CKV_PAN_6 | resource | panos_security_rule_group | Ensure security rules do not have 'services' set to 'any' | Terraform |
1986-
| 1975 | CKV_PAN_7 | resource | panos_security_policy | Ensure security rules do not have 'source_addresses' and 'destination_addresses' both containing values of 'any' | Terraform |
1987-
| 1976 | CKV_PAN_7 | resource | panos_security_rule_group | Ensure security rules do not have 'source_addresses' and 'destination_addresses' both containing values of 'any' | Terraform |
1988-
| 1977 | CKV_PAN_8 | resource | panos_security_policy | Ensure description is populated within security policies | Terraform |
1989-
| 1978 | CKV_PAN_8 | resource | panos_security_rule_group | Ensure description is populated within security policies | Terraform |
1990-
| 1979 | CKV_PAN_9 | resource | panos_security_policy | Ensure a Log Forwarding Profile is selected for each security policy rule | Terraform |
1991-
| 1980 | CKV_PAN_9 | resource | panos_security_rule_group | Ensure a Log Forwarding Profile is selected for each security policy rule | Terraform |
1992-
| 1981 | CKV_PAN_10 | resource | panos_security_policy | Ensure logging at session end is enabled within security policies | Terraform |
1993-
| 1982 | CKV_PAN_10 | resource | panos_security_rule_group | Ensure logging at session end is enabled within security policies | Terraform |
1994-
| 1983 | CKV_PAN_11 | resource | panos_ipsec_crypto_profile | Ensure IPsec profiles do not specify use of insecure encryption algorithms | Terraform |
1995-
| 1984 | CKV_PAN_11 | resource | panos_panorama_ipsec_crypto_profile | Ensure IPsec profiles do not specify use of insecure encryption algorithms | Terraform |
1996-
| 1985 | CKV_PAN_12 | resource | panos_ipsec_crypto_profile | Ensure IPsec profiles do not specify use of insecure authentication algorithms | Terraform |
1997-
| 1986 | CKV_PAN_12 | resource | panos_panorama_ipsec_crypto_profile | Ensure IPsec profiles do not specify use of insecure authentication algorithms | Terraform |
1998-
| 1987 | CKV_PAN_13 | resource | panos_ipsec_crypto_profile | Ensure IPsec profiles do not specify use of insecure protocols | Terraform |
1999-
| 1988 | CKV_PAN_13 | resource | panos_panorama_ipsec_crypto_profile | Ensure IPsec profiles do not specify use of insecure protocols | Terraform |
2000-
| 1989 | CKV_PAN_14 | resource | panos_panorama_zone | Ensure a Zone Protection Profile is defined within Security Zones | Terraform |
2001-
| 1990 | CKV_PAN_14 | resource | panos_zone | Ensure a Zone Protection Profile is defined within Security Zones | Terraform |
2002-
| 1991 | CKV_PAN_14 | resource | panos_zone_entry | Ensure a Zone Protection Profile is defined within Security Zones | Terraform |
2003-
| 1992 | CKV_PAN_15 | resource | panos_panorama_zone | Ensure an Include ACL is defined for a Zone when User-ID is enabled | Terraform |
2004-
| 1993 | CKV_PAN_15 | resource | panos_zone | Ensure an Include ACL is defined for a Zone when User-ID is enabled | Terraform |
2005-
| 1994 | CKV_SECRET_1 | Artifactory Credentials | secrets | Artifactory Credentials | secrets |
2006-
| 1995 | CKV_SECRET_2 | AWS Access Key | secrets | AWS Access Key | secrets |
2007-
| 1996 | CKV_SECRET_3 | Azure Storage Account access key | secrets | Azure Storage Account access key | secrets |
2008-
| 1997 | CKV_SECRET_4 | Basic Auth Credentials | secrets | Basic Auth Credentials | secrets |
2009-
| 1998 | CKV_SECRET_5 | Cloudant Credentials | secrets | Cloudant Credentials | secrets |
2010-
| 1999 | CKV_SECRET_6 | Base64 High Entropy String | secrets | Base64 High Entropy String | secrets |
2011-
| 2000 | CKV_SECRET_7 | IBM Cloud IAM Key | secrets | IBM Cloud IAM Key | secrets |
2012-
| 2001 | CKV_SECRET_8 | IBM COS HMAC Credentials | secrets | IBM COS HMAC Credentials | secrets |
2013-
| 2002 | CKV_SECRET_9 | JSON Web Token | secrets | JSON Web Token | secrets |
2014-
| 2003 | CKV_SECRET_11 | Mailchimp Access Key | secrets | Mailchimp Access Key | secrets |
2015-
| 2004 | CKV_SECRET_12 | NPM tokens | secrets | NPM tokens | secrets |
2016-
| 2005 | CKV_SECRET_13 | Private Key | secrets | Private Key | secrets |
2017-
| 2006 | CKV_SECRET_14 | Slack Token | secrets | Slack Token | secrets |
2018-
| 2007 | CKV_SECRET_15 | SoftLayer Credentials | secrets | SoftLayer Credentials | secrets |
2019-
| 2008 | CKV_SECRET_16 | Square OAuth Secret | secrets | Square OAuth Secret | secrets |
2020-
| 2009 | CKV_SECRET_17 | Stripe Access Key | secrets | Stripe Access Key | secrets |
2021-
| 2010 | CKV_SECRET_18 | Twilio API Key | secrets | Twilio API Key | secrets |
2022-
| 2011 | CKV_SECRET_19 | Hex High Entropy String | secrets | Hex High Entropy String | secrets |
1970+
| 1959 | CKV_OPENAPI_1 | resource | securityDefinitions | Ensure that securityDefinitions is defined and not empty. | OpenAPI |
1971+
| 1960 | CKV_OPENAPI_2 | resource | security | Ensure that if the security scheme is not of type 'oauth2', the array value must be empty | OpenAPI |
1972+
| 1961 | CKV_OPENAPI_3 | resource | components | Ensure that security schemes don't allow cleartext credentials over unencrypted channel | OpenAPI |
1973+
| 1962 | CKV_OPENAPI_4 | resource | security | Ensure that the global security field has rules defined | OpenAPI |
1974+
| 1963 | CKV_OPENAPI_5 | resource | security | Ensure that security operations is not empty. | OpenAPI |
1975+
| 1964 | CKV_OPENAPI_6 | resource | security | Ensure that security requirement defined in securityDefinitions. | OpenAPI |
1976+
| 1965 | CKV_OPENSTACK_1 | provider | openstack | Ensure no hard coded OpenStack password, token, or application_credential_secret exists in provider | Terraform |
1977+
| 1966 | CKV_OPENSTACK_2 | resource | openstack_compute_secgroup_v2 | Ensure no security groups allow ingress from 0.0.0.0:0 to port 22 (tcp / udp) | Terraform |
1978+
| 1967 | CKV_OPENSTACK_2 | resource | openstack_networking_secgroup_rule_v2 | Ensure no security groups allow ingress from 0.0.0.0:0 to port 22 (tcp / udp) | Terraform |
1979+
| 1968 | CKV_OPENSTACK_3 | resource | openstack_compute_secgroup_v2 | Ensure no security groups allow ingress from 0.0.0.0:0 to port 3389 (tcp / udp) | Terraform |
1980+
| 1969 | CKV_OPENSTACK_3 | resource | openstack_networking_secgroup_rule_v2 | Ensure no security groups allow ingress from 0.0.0.0:0 to port 3389 (tcp / udp) | Terraform |
1981+
| 1970 | CKV_OPENSTACK_4 | resource | openstack_compute_instance_v2 | Ensure that instance does not use basic credentials | Terraform |
1982+
| 1971 | CKV_OPENSTACK_5 | resource | openstack_fw_rule_v1 | Ensure firewall rule set a destination IP | Terraform |
1983+
| 1972 | CKV_PAN_1 | provider | panos | Ensure no hard coded PAN-OS credentials exist in provider | Terraform |
1984+
| 1973 | CKV_PAN_2 | resource | panos_management_profile | Ensure plain-text management HTTP is not enabled for an Interface Management Profile | Terraform |
1985+
| 1974 | CKV_PAN_3 | resource | panos_management_profile | Ensure plain-text management Telnet is not enabled for an Interface Management Profile | Terraform |
1986+
| 1975 | CKV_PAN_4 | resource | panos_security_policy | Ensure DSRI is not enabled within security policies | Terraform |
1987+
| 1976 | CKV_PAN_4 | resource | panos_security_rule_group | Ensure DSRI is not enabled within security policies | Terraform |
1988+
| 1977 | CKV_PAN_5 | resource | panos_security_policy | Ensure security rules do not have 'applications' set to 'any' | Terraform |
1989+
| 1978 | CKV_PAN_5 | resource | panos_security_rule_group | Ensure security rules do not have 'applications' set to 'any' | Terraform |
1990+
| 1979 | CKV_PAN_6 | resource | panos_security_policy | Ensure security rules do not have 'services' set to 'any' | Terraform |
1991+
| 1980 | CKV_PAN_6 | resource | panos_security_rule_group | Ensure security rules do not have 'services' set to 'any' | Terraform |
1992+
| 1981 | CKV_PAN_7 | resource | panos_security_policy | Ensure security rules do not have 'source_addresses' and 'destination_addresses' both containing values of 'any' | Terraform |
1993+
| 1982 | CKV_PAN_7 | resource | panos_security_rule_group | Ensure security rules do not have 'source_addresses' and 'destination_addresses' both containing values of 'any' | Terraform |
1994+
| 1983 | CKV_PAN_8 | resource | panos_security_policy | Ensure description is populated within security policies | Terraform |
1995+
| 1984 | CKV_PAN_8 | resource | panos_security_rule_group | Ensure description is populated within security policies | Terraform |
1996+
| 1985 | CKV_PAN_9 | resource | panos_security_policy | Ensure a Log Forwarding Profile is selected for each security policy rule | Terraform |
1997+
| 1986 | CKV_PAN_9 | resource | panos_security_rule_group | Ensure a Log Forwarding Profile is selected for each security policy rule | Terraform |
1998+
| 1987 | CKV_PAN_10 | resource | panos_security_policy | Ensure logging at session end is enabled within security policies | Terraform |
1999+
| 1988 | CKV_PAN_10 | resource | panos_security_rule_group | Ensure logging at session end is enabled within security policies | Terraform |
2000+
| 1989 | CKV_PAN_11 | resource | panos_ipsec_crypto_profile | Ensure IPsec profiles do not specify use of insecure encryption algorithms | Terraform |
2001+
| 1990 | CKV_PAN_11 | resource | panos_panorama_ipsec_crypto_profile | Ensure IPsec profiles do not specify use of insecure encryption algorithms | Terraform |
2002+
| 1991 | CKV_PAN_12 | resource | panos_ipsec_crypto_profile | Ensure IPsec profiles do not specify use of insecure authentication algorithms | Terraform |
2003+
| 1992 | CKV_PAN_12 | resource | panos_panorama_ipsec_crypto_profile | Ensure IPsec profiles do not specify use of insecure authentication algorithms | Terraform |
2004+
| 1993 | CKV_PAN_13 | resource | panos_ipsec_crypto_profile | Ensure IPsec profiles do not specify use of insecure protocols | Terraform |
2005+
| 1994 | CKV_PAN_13 | resource | panos_panorama_ipsec_crypto_profile | Ensure IPsec profiles do not specify use of insecure protocols | Terraform |
2006+
| 1995 | CKV_PAN_14 | resource | panos_panorama_zone | Ensure a Zone Protection Profile is defined within Security Zones | Terraform |
2007+
| 1996 | CKV_PAN_14 | resource | panos_zone | Ensure a Zone Protection Profile is defined within Security Zones | Terraform |
2008+
| 1997 | CKV_PAN_14 | resource | panos_zone_entry | Ensure a Zone Protection Profile is defined within Security Zones | Terraform |
2009+
| 1998 | CKV_PAN_15 | resource | panos_panorama_zone | Ensure an Include ACL is defined for a Zone when User-ID is enabled | Terraform |
2010+
| 1999 | CKV_PAN_15 | resource | panos_zone | Ensure an Include ACL is defined for a Zone when User-ID is enabled | Terraform |
2011+
| 2000 | CKV_SECRET_1 | Artifactory Credentials | secrets | Artifactory Credentials | secrets |
2012+
| 2001 | CKV_SECRET_2 | AWS Access Key | secrets | AWS Access Key | secrets |
2013+
| 2002 | CKV_SECRET_3 | Azure Storage Account access key | secrets | Azure Storage Account access key | secrets |
2014+
| 2003 | CKV_SECRET_4 | Basic Auth Credentials | secrets | Basic Auth Credentials | secrets |
2015+
| 2004 | CKV_SECRET_5 | Cloudant Credentials | secrets | Cloudant Credentials | secrets |
2016+
| 2005 | CKV_SECRET_6 | Base64 High Entropy String | secrets | Base64 High Entropy String | secrets |
2017+
| 2006 | CKV_SECRET_7 | IBM Cloud IAM Key | secrets | IBM Cloud IAM Key | secrets |
2018+
| 2007 | CKV_SECRET_8 | IBM COS HMAC Credentials | secrets | IBM COS HMAC Credentials | secrets |
2019+
| 2008 | CKV_SECRET_9 | JSON Web Token | secrets | JSON Web Token | secrets |
2020+
| 2009 | CKV_SECRET_11 | Mailchimp Access Key | secrets | Mailchimp Access Key | secrets |
2021+
| 2010 | CKV_SECRET_12 | NPM tokens | secrets | NPM tokens | secrets |
2022+
| 2011 | CKV_SECRET_13 | Private Key | secrets | Private Key | secrets |
2023+
| 2012 | CKV_SECRET_14 | Slack Token | secrets | Slack Token | secrets |
2024+
| 2013 | CKV_SECRET_15 | SoftLayer Credentials | secrets | SoftLayer Credentials | secrets |
2025+
| 2014 | CKV_SECRET_16 | Square OAuth Secret | secrets | Square OAuth Secret | secrets |
2026+
| 2015 | CKV_SECRET_17 | Stripe Access Key | secrets | Stripe Access Key | secrets |
2027+
| 2016 | CKV_SECRET_18 | Twilio API Key | secrets | Twilio API Key | secrets |
2028+
| 2017 | CKV_SECRET_19 | Hex High Entropy String | secrets | Hex High Entropy String | secrets |
20232029

20242030

20252031
---

‎docs/5.Policy Index/openapi.md

+21
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
---
2+
layout: default
3+
title: openapi resource scans
4+
nav_order: 1
5+
---
6+
7+
# openapi resource scans (auto generated)
8+
9+
| | Id | Type | Entity | Policy | IaC |
10+
|----|---------------|----------|---------------------|-------------------------------------------------------------------------------------------|---------|
11+
| 0 | CKV_OPENAPI_1 | resource | securityDefinitions | Ensure that securityDefinitions is defined and not empty. | OpenAPI |
12+
| 1 | CKV_OPENAPI_2 | resource | security | Ensure that if the security scheme is not of type 'oauth2', the array value must be empty | OpenAPI |
13+
| 2 | CKV_OPENAPI_3 | resource | components | Ensure that security schemes don't allow cleartext credentials over unencrypted channel | OpenAPI |
14+
| 3 | CKV_OPENAPI_4 | resource | security | Ensure that the global security field has rules defined | OpenAPI |
15+
| 4 | CKV_OPENAPI_5 | resource | security | Ensure that security operations is not empty. | OpenAPI |
16+
| 5 | CKV_OPENAPI_6 | resource | security | Ensure that security requirement defined in securityDefinitions. | OpenAPI |
17+
18+
19+
---
20+
21+

0 commit comments

Comments
 (0)
Please sign in to comment.