bridgecrewio / checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
https://www.checkov.io/
Apache License 2.0
6.72k stars 1.08k forks source link

CKV_GCP_109 false positive #6361

Open brettcurtis opened 1 month ago

brettcurtis commented 1 month ago

Describe the issue CKV_GCP_109 Ensure the GCP PostgreSQL database log levels are set to ERROR or lower fails when the log level is set to error.

Examples You can repo with this repo/code:

gh repo clone osinfra-io/terraform-google-cloud-sql
cd terraform-google-cloud-sql/tests/fixtures/default
terraform init
terraform plan --out tfplan.binary
terraform show -json tfplan.binary | jq > tfplan.json
checkov -f tfplan.json

Version (please complete the following information):

Additional Info I did find this: https://github.com/bridgecrewio/checkov/issues/6057#issuecomment-1972174136 - I suppose if you're looking for log_min_error_statement as well this could be a documentation update.