Show Output
```hcl
Results #1-2 CRITICAL Firewall rule allows ingress traffic from multiple addresses on the public internet. (2 similar results)
────────────────────────────────────────────────────────────────────────────────
firewall.tf Lines 24-27
───────┬────────────────────────────────────────────────────────────────────────
24 │ source_ranges = [
25 │ "35.191.0.0/16",
26 │ "130.211.0.0/22"
27 │ ]
───────┴────────────────────────────────────────────────────────────────────────
Individual Causes
- /github/workspace/firewall.tf:15-39 (google_compute_firewall.this)
- /github/workspace/firewall.tf:15-39 (google_compute_firewall.this)
────────────────────────────────────────────────────────────────────────────────
ID google-compute-no-public-ingress
Impact The port is exposed for ingress from the internet
Resolution Set a more restrictive cidr range
More Information
- https://aquasecurity.github.io/tfsec/latest/checks/google/compute/no-public-ingress/
- https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/compute_firewall#source_ranges
- https://www.terraform.io/docs/providers/google/r/compute_firewall.html
────────────────────────────────────────────────────────────────────────────────
timings
──────────────────────────────────────────
disk i/o 180.603µs
parsing 954.813µs
adaptation 84.101µs
checks 20.01086ms
total 21.230377ms
counts
──────────────────────────────────────────
blocks 15
modules 1
files 7
results
──────────────────────────────────────────
passed 0
ignored 0
critical 2
high 0
medium 0
low 0
2 potential problem(s) detected.
```
github-actions[bot]
commented
2 years ago
This PR contains the following updates:
v3->v4Release Notes
peter-evans/create-pull-request
### [`v4`](https://togithub.com/peter-evans/create-pull-request/compare/v3...v4) [Compare Source](https://togithub.com/peter-evans/create-pull-request/compare/v3...v4)Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.