cds-snc / notification-planning-core

Project planning for GC Notify Core Team

0 stars 0 forks source link

Fix terraform Checkov violations #311

Open sastels opened 3 months ago

sastels commented 3 months ago

Description

As a Notify developer, I need my infrastructure to be secure

WHY are we building?

Want to address security vulnerabilities

WHAT are we building?

Fix or (officially) ignore all Checkov vulnerabilities. For more information see https://docs.google.com/spreadsheets/d/1TVo5pxRTRcA-5U-7Wtv7Qy_X0LVQ3s-QiCxF8jLrIbM

VALUE created by our solution

Secure product

Acceptance Criteria

Given some context, when (X) action occurs, then (Y) outcome is achieved.

[ ] Running checkov agains the repo does not generate failures

QA Steps

[ ] Run checkov locally in notification-terraform (main branch) and check that there are no failures: checkov -d . --framework terraform -o cli --quiet

jimleroyer commented 3 months ago

I converted this to an epic so that we have all the list of task within it. @sastels