bridgecrewio / checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
https://www.checkov.io/
Apache License 2.0
7.16k stars 1.12k forks source link

feat(terraform): Add new checks to match run checks #6868

Open tsmithv11 opened 3 days ago

tsmithv11 commented 3 days ago

User description

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[//]: # "

PR Title

We use the title to create changelog automatically and therefore only allow specific prefixes
- break:    to indicate a breaking change, this supersedes any of the other types
- feat:     to indicate new features or checks
- fix:      to indicate a bugfix or handling of edge cases of existing checks
- docs:     to indicate an update to our documentation
- chore:    to indicate adjustments to workflow files or dependency updates
- platform: to indicate a change needed for the platform
Each prefix should be accompanied by a scope that specifies the targeted framework. If uncertain, use 'general'.
#    
Allowed prefixs:
ansible|argo|arm|azure|bicep|bitbucket|circleci|cloudformation|dockerfile|github|gha|gitlab|helm|kubernetes|kustomize|openapi|sast|sca|secrets|serverless|terraform|general|graph|terraform_plan|terraform_json
#
ex.
feat(terraform): add CKV_AWS_123 to ensure that VPC Endpoint Service is configured for Manual Acceptance

"

Description

Checklist:





Generated description

Below is a concise technical summary of the changes proposed in this PR:

This pull request introduces new test files for the Terraform runner, specifically focusing on plan execution and general runner functionality. The changes aim to enhance the test coverage and ensure the robustness of the Terraform runner.

<table><tr><th>Topic</th><th>Details</th><tr><td><a href=https://baz.co/changes/bridgecrewio/checkov/6868?tool=ast&topic=Terraform+Runner+Tests>Terraform Runner Tests</a>
    </td><td>Test the functionality of the Terraform runner.<details><summary>Modified files (2)</summary><ul><li>tests/terraform/runner/test_plan_runner.py</li>
  • tests/terraform/runner/test_runner.py
  • Latest Contributors(2)
    UserCommitDate
    rotemavnifix-terraform-Set-time...October 13, 2024
    tsmithv11feat-terraform-New-che...September 19, 2024
    AWS Security Checks Implement AWS security group checks to prevent unrestricted egress.
    Modified files (4)
    • tests/terraform/checks/resource/aws/test_SecurityGroupUnrestrictedEgressAny.py
    • checkov/terraform/checks/resource/aws/SecurityGroupUnrestrictedEgressAny.py
    • checkov/terraform/checks/resource/aws/AbsSecurityGroupUnrestrictedEgress.py
    • tests/terraform/checks/resource/aws/example_SecurityGroupUnrestrictedEgressAny/main.tf
    Latest Contributors(0)
    UserCommitDate
    Azure Security Checks Add checks for Azure resources to ensure secure configurations.
    Modified files (11)
    • tests/terraform/checks/resource/azure/test_AzureContainerInstancePublicIPAddressType.py
    • checkov/terraform/checks/resource/azure/AzureContainerInstancePublicIPAddressType.py
    • tests/terraform/image_referencer/test_runner_azure_resources.py
    • tests/terraform/checks/resource/azure/test_KubernetesClusterHTTPApplicationRouting.py
    • checkov/terraform/checks/resource/azure/KubernetesClusterHTTPApplicationRouting.py
    • tests/terraform/graph/checks/test_yaml_policies.py
    • tests/terraform/graph/checks/resources/AzureSpringCloudTLSDisabled/expected.yaml
    • tests/terraform/checks/resource/azure/example_AzureContainerInstancePublicIPAddressType/main.tf
    • tests/terraform/graph/checks/resources/AzureSpringCloudTLSDisabled/main.tf
    • tests/terraform/checks/resource/azure/example_KubernetesClusterHTTPApplicationRouting/main.tf
    • checkov/terraform/checks/graph_checks/azure/AzureSpringCloudTLSDisabled.yaml
    Latest Contributors(2)
    UserCommitDate
    tdefisefix-terraform-Added-ap...October 16, 2024
    tsmithv11feat-terraform-2-new-c...October 14, 2024
    This pull request is reviewed by Baz. Join @tsmithv11 and the rest of your team on (Baz).