cisagov / ScubaGoggles

SCuBA Security Configuration Baselines and assessment tool for Google Workspace
https://www.cisa.gov/resources-tools/services/secure-cloud-business-applications-scuba-project
Creative Commons Zero v1.0 Universal
129 stars 13 forks source link

Scan begins to run but then freezes and doesn't output a report #257

Open Tony-Lutz opened 3 months ago

Tony-Lutz commented 3 months ago

🐛 Summary

What's wrong? Please be specific.

To reproduce

os: Windows

python: 3.12.2.

ScubaGoggles Binary Version: 0.57.0

Steps to reproduce the behavior:

  1. Run scubagoggles gws
  2. Then the command appears to begin running with one or more status bars, it creates the output directory, but then it appears to freeze up, and doesn't output anything.

Expected behavior

I expected the command to show progress and then complete with output, or even an error message.

Any helpful log output or screenshots

I tried the --debug option, but I didn't observe any additional output.

buidav commented 3 months ago

Is there a specific point where the scan freezes? After which progress bar does scubagoggles specifically freeze?

Could you run scubagoggles by baseline and see if there is a specific baseline scan that is causing the issue? scubagoggles gws -b calendar scubagoggles gws -b groups meet etc.

Tony-Lutz commented 3 months ago

Hi David,

Thanks for the quick response!

I started over, but this time with the main branch -- instead of the latest release.

The scanning no longer freezes, but I'm not observing new error messages:

Terminal Output: C:\redacted.venv\Lib\site-packages\scubagoggles\provider.py:454: RuntimeWarning: Exception thrown while getting group settings; outputs will be incorrect: 'NoneType' object is not iterable warnings.warn(

Report Output: This test depends on the following API call(s) which did not execute successfully: directory/v1/groups/list, groups-settings/v1/groups/get. See terminal output for more details.

Thanks,

Tony

buidav commented 3 months ago

Report Output: This test depends on the following API call(s) which did not execute successfully: directory/v1/groups/list, groups-settings/v1/groups/get. See terminal output for more details.

Thanks for the update as well. Did you enable the Group Settings API for your Google Workspace Organization? Step 25 in this section of the README.