turbot / steampipe-mod-gcp-compliance

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS across all of your GCP projects using Powerpipe and Steampipe.
https://hub.powerpipe.io/mods/turbot/gcp_compliance
Apache License 2.0
36 stars 10 forks source link

Controls between 2.6 and 2.9 of CIS v2.0.0 doesn't work with the GCP project configured as the instruction in the documantation. #150

Closed k-kawa closed 7 months ago

k-kawa commented 8 months ago

Controls between 2.6 and 2.9 of CIS v2.0.0 report alert on the GCP projects even after they are configured as the Remediation section say.

The reason is that Logging Query Language written in their documentation has ( and ) but the queries used by their Control don't care them.

I think that this is a bug of Queries and the documentations look correct.

khushboo9024 commented 7 months ago

Hi @k-kawa Sorry for the delay, and thank you for raising this issue. We will investigate it and update you as soon as possible.

khushboo9024 commented 7 months ago

Resolved in https://github.com/turbot/steampipe-mod-gcp-compliance/pull/154