Checkmarx / kics

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
https://kics.io
Apache License 2.0
1.97k stars 295 forks source link

feat(query): add new query for tencentcloud CVM resource #7136

Closed SevenEarth closed 1 week ago

SevenEarth commented 2 weeks ago

Hello, There is something new query for TencentCloud TKE resource:

cvm_instance_using_user_data

Please help review the PR Thanks

I submit this contribution under the Apache-2.0 license.

SevenEarth commented 2 weeks ago

This is my local test

image
SevenEarth commented 1 week ago

Hello Please help review the PR Thanks

SevenEarth commented 1 week ago

Looks good to me but could we also add positive expected results for "secretId" and "secretKey" since the regex is also looking for those values? Thanks for your contribution!

Yes, you are right. I will improve it