From 45c0b3c5947c94b2852c59ee52c773242f16dad9 Mon Sep 17 00:00:00 2001 From: Nikita Pivkin Date: Fri, 31 May 2024 22:19:07 +0700 Subject: [PATCH] chore: migrate to Trivy --- .github/workflows/generate-html.yaml | 3 --- .gitignore | 2 +- Makefile | 15 +++++++-------- out/cloud/cloud.html | 2 +- 4 files changed, 9 insertions(+), 13 deletions(-) diff --git a/.github/workflows/generate-html.yaml b/.github/workflows/generate-html.yaml index cac1f4d..09d9dd2 100644 --- a/.github/workflows/generate-html.yaml +++ b/.github/workflows/generate-html.yaml @@ -21,9 +21,6 @@ jobs: - name: Install Dependencies run: pip install json-schema-for-humans==0.47 - - name: Clone Repository - run: make clone-repo - - name: Generate HTML run: make generate-html diff --git a/.gitignore b/.gitignore index 2f54304..9851b63 100644 --- a/.gitignore +++ b/.gitignore @@ -1,5 +1,5 @@ .idea -defsec +env **/.DS_Store \ No newline at end of file diff --git a/Makefile b/Makefile index 3f042e4..0ff73df 100644 --- a/Makefile +++ b/Makefile @@ -1,13 +1,12 @@ SCHEMA_CONFIG_FILE=./config/config.yaml -PATH_TO_SCHEMAS=./defsec/pkg/rego/schemas SCHEMAS=dockerfile kubernetes cloud rbac OUT_DIRECTORY=out generate-html: - @for schema in $(SCHEMAS); do \ - mkdir -p out/$$schema; \ - generate-schema-doc --config-file $(SCHEMA_CONFIG_FILE) $(PATH_TO_SCHEMAS)/$$schema.json $(OUT_DIRECTORY)/$$schema; \ - done - -clone-repo: - git clone https://github.com/aquasecurity/defsec + @tmpdep=`mktemp -d`; \ + trap 'rm -rf $$tmpdep' EXIT; \ + for schema in $(SCHEMAS); do \ + wget -q -O $$tmpdep/$$schema.json https://raw.githubusercontent.com/aquasecurity/trivy/main/pkg/iac/rego/schemas/$$schema.json; \ + mkdir -p $(OUT_DIRECTORY)/$$schema; \ + generate-schema-doc --config-file $(SCHEMA_CONFIG_FILE) $$tmpdep/$$schema.json $(OUT_DIRECTORY)/$$schema; \ + done \ No newline at end of file diff --git a/out/cloud/cloud.html b/out/cloud/cloud.html index 35b4451..ebf5363 100644 --- a/out/cloud/cloud.html +++ b/out/cloud/cloud.html @@ -1 +1 @@ - Schema Docs
Type: object

root aws
Type: object

root aws accessanalyzer
Type: object

root aws accessanalyzer analyzers
Type: array of object
No Additional Items

Each item of this array must be:

root aws accessanalyzer analyzers github.com.aquasecurity.defsec.pkg.providers.aws.accessanalyzer.Analyzer
Type: object

root aws apigateway
Type: object

root aws apigateway v1
Type: object

root aws apigateway v1 apis
Type: array of object
No Additional Items

Each item of this array must be:

root aws apigateway v1 apis github.com.aquasecurity.defsec.pkg.providers.aws.apigateway.v1.API
Type: object

root aws apigateway v1 apis apis items stages
Type: array of object
No Additional Items

Each item of this array must be:

root aws apigateway v1 apis apis items stages github.com.aquasecurity.defsec.pkg.providers.aws.apigateway.v1.Stage
Type: object

root aws apigateway v2
Type: object

root aws apigateway v2 apis
Type: array of object
No Additional Items

Each item of this array must be:

root aws apigateway v2 apis github.com.aquasecurity.defsec.pkg.providers.aws.apigateway.v2.API
Type: object

root aws athena
Type: object

root aws athena databases
Type: array of object
No Additional Items

Each item of this array must be:

root aws athena databases github.com.aquasecurity.defsec.pkg.providers.aws.athena.Database
Type: object

root aws cloudfront
Type: object

root aws cloudfront distributions
Type: array of object
No Additional Items

Each item of this array must be:

root aws cloudfront distributions github.com.aquasecurity.defsec.pkg.providers.aws.cloudfront.Distribution
Type: object

root aws cloudtrail
Type: object

root aws cloudtrail trails
Type: array of object
No Additional Items

Each item of this array must be:

root aws cloudtrail trails github.com.aquasecurity.defsec.pkg.providers.aws.cloudtrail.Trail
Type: object

root aws cloudwatch
Type: object

root aws cloudwatch loggroups
Type: array of object
No Additional Items

Each item of this array must be:

root aws cloudwatch loggroups github.com.aquasecurity.defsec.pkg.providers.aws.cloudwatch.LogGroup
Type: object

root aws codebuild
Type: object

root aws config
Type: object

root aws dynamodb
Type: object

root aws dynamodb tables
Type: array of object
No Additional Items

Each item of this array must be:

root aws dynamodb tables github.com.aquasecurity.defsec.pkg.providers.aws.dynamodb.Table
Type: object

root aws ec2
Type: object

root aws ec2 instances
Type: array of object
No Additional Items

Each item of this array must be:

root aws ec2 instances github.com.aquasecurity.defsec.pkg.providers.aws.ec2.Instance
Type: object

root aws ec2 instances instances items securitygroups
Type: array of object
No Additional Items

Each item of this array must be:

root aws ec2 instances instances items securitygroups github.com.aquasecurity.defsec.pkg.providers.aws.ec2.SecurityGroup
Type: object

root aws ec2 subnets
Type: array of object
No Additional Items

Each item of this array must be:

root aws ec2 subnets github.com.aquasecurity.defsec.pkg.providers.aws.ec2.Subnet
Type: object

root aws ec2 volumes
Type: array of object
No Additional Items

Each item of this array must be:

root aws ec2 volumes github.com.aquasecurity.defsec.pkg.providers.aws.ec2.Volume
Type: object

root aws ec2 vpcs
Type: array of object
No Additional Items

Each item of this array must be:

root aws ec2 vpcs github.com.aquasecurity.defsec.pkg.providers.aws.ec2.VPC
Type: object

root aws ecr
Type: object

root aws ecr repositories
Type: array of object
No Additional Items

Each item of this array must be:

root aws ecr repositories github.com.aquasecurity.defsec.pkg.providers.aws.ecr.Repository
Type: object

root aws ecr repositories repositories items policies
Type: array of object
No Additional Items

Each item of this array must be:

root aws ecr repositories repositories items policies github.com.aquasecurity.defsec.pkg.providers.aws.iam.Policy
Type: object

root aws ecs
Type: object

root aws ecs clusters
Type: array of object
No Additional Items

Each item of this array must be:

root aws ecs clusters github.com.aquasecurity.defsec.pkg.providers.aws.ecs.Cluster
Type: object

root aws ecs taskdefinitions
Type: array of object
No Additional Items

Each item of this array must be:

root aws ecs taskdefinitions github.com.aquasecurity.defsec.pkg.providers.aws.ecs.TaskDefinition
Type: object

root aws ecs taskdefinitions taskdefinitions items containerdefinitions
Type: array of object
No Additional Items

Each item of this array must be:

root aws ecs taskdefinitions taskdefinitions items containerdefinitions github.com.aquasecurity.defsec.pkg.providers.aws.ecs.ContainerDefinition
Type: object

root aws efs
Type: object

root aws efs filesystems
Type: array of object
No Additional Items

Each item of this array must be:

root aws efs filesystems github.com.aquasecurity.defsec.pkg.providers.aws.efs.FileSystem
Type: object

root aws eks
Type: object

root aws elasticache
Type: object

root aws elasticsearch
Type: object

root aws elasticsearch domains
Type: array of object
No Additional Items

Each item of this array must be:

root aws elasticsearch domains github.com.aquasecurity.defsec.pkg.providers.aws.elasticsearch.Domain
Type: object

root aws elb
Type: object

root aws elb loadbalancers
Type: array of object
No Additional Items

Each item of this array must be:

root aws elb loadbalancers github.com.aquasecurity.defsec.pkg.providers.aws.elb.LoadBalancer
Type: object

root aws emr
Type: object

root aws emr clusters
Type: array of object
No Additional Items

Each item of this array must be:

root aws emr clusters github.com.aquasecurity.defsec.pkg.providers.aws.emr.Cluster
Type: object

root aws iam
Type: object

root aws iam groups
Type: array of object
No Additional Items

Each item of this array must be:

root aws iam groups github.com.aquasecurity.defsec.pkg.providers.aws.iam.Group
Type: object

root aws iam groups groups items users
Type: array of object
No Additional Items

Each item of this array must be:

root aws iam groups groups items users github.com.aquasecurity.defsec.pkg.providers.aws.iam.User
Type: object

root aws iam groups groups items users users items accesskeys
Type: array of object
No Additional Items

Each item of this array must be:

root aws iam groups groups items users users items accesskeys github.com.aquasecurity.defsec.pkg.providers.aws.iam.AccessKey
Type: object

root aws iam policies
Type: array of object
No Additional Items

Each item of this array must be:

root aws iam policies github.com.aquasecurity.defsec.pkg.providers.aws.iam.Policy
Type: object
Same definition as aws_ecr_repositories_items_policies_items

root aws iam roles
Type: array of object
No Additional Items

Each item of this array must be:

root aws iam roles github.com.aquasecurity.defsec.pkg.providers.aws.iam.Role
Type: object

root aws iam users
Type: array of object
No Additional Items

Each item of this array must be:

root aws iam users github.com.aquasecurity.defsec.pkg.providers.aws.iam.User
Type: object
Same definition as aws_iam_groups_items_users_items

root aws kinesis
Type: object

root aws kinesis streams
Type: array of object
No Additional Items

Each item of this array must be:

root aws kinesis streams github.com.aquasecurity.defsec.pkg.providers.aws.kinesis.Stream
Type: object

root aws kms
Type: object

root aws kms keys
Type: array of object
No Additional Items

Each item of this array must be:

root aws kms keys github.com.aquasecurity.defsec.pkg.providers.aws.kms.Key
Type: object

root aws lambda
Type: object

root aws meta
Type: object

root aws meta tfproviders
Type: array of object
No Additional Items

Each item of this array must be:

root aws meta tfproviders github.com.aquasecurity.defsec.pkg.providers.aws.TerraformProvider
Type: object

root aws meta tfproviders tfproviders items assumerole
Type: object

root aws mq
Type: object

root aws mq brokers
Type: array of object
No Additional Items

Each item of this array must be:

root aws mq brokers github.com.aquasecurity.defsec.pkg.providers.aws.mq.Broker
Type: object

root aws neptune
Type: object

root aws neptune clusters
Type: array of object
No Additional Items

Each item of this array must be:

root aws neptune clusters github.com.aquasecurity.defsec.pkg.providers.aws.neptune.Cluster
Type: object

root aws rds
Type: object

root aws rds classic
Type: object

root aws rds classic dbsecuritygroups
Type: array of object
No Additional Items

Each item of this array must be:

root aws rds classic dbsecuritygroups github.com.aquasecurity.defsec.pkg.providers.aws.rds.DBSecurityGroup
Type: object

root aws rds clusters
Type: array of object
No Additional Items

Each item of this array must be:

root aws rds clusters github.com.aquasecurity.defsec.pkg.providers.aws.rds.Cluster
Type: object

root aws rds clusters clusters items instances
Type: array of object
No Additional Items

Each item of this array must be:

root aws rds clusters clusters items instances github.com.aquasecurity.defsec.pkg.providers.aws.rds.ClusterInstance
Type: object

root aws rds clusters clusters items instances instances items instance
Type: object

root aws rds instances
Type: array of object
No Additional Items

Each item of this array must be:

root aws rds instances github.com.aquasecurity.defsec.pkg.providers.aws.rds.Instance
Type: object
Same definition as instance

root aws redshift
Type: object

root aws redshift clusters
Type: array of object
No Additional Items

Each item of this array must be:

root aws redshift clusters github.com.aquasecurity.defsec.pkg.providers.aws.redshift.Cluster
Type: object

root aws redshift reservednodes
Type: array of object
No Additional Items

Each item of this array must be:

root aws redshift reservednodes github.com.aquasecurity.defsec.pkg.providers.aws.redshift.ReservedNode
Type: object

root aws redshift securitygroups
Type: array of object
No Additional Items

Each item of this array must be:

root aws redshift securitygroups github.com.aquasecurity.defsec.pkg.providers.aws.redshift.SecurityGroup
Type: object

root aws s3
Type: object

root aws s3 buckets
Type: array of object
No Additional Items

Each item of this array must be:

root aws s3 buckets github.com.aquasecurity.defsec.pkg.providers.aws.s3.Bucket
Type: object

root aws s3 buckets buckets items objects
Type: array of object
No Additional Items

Each item of this array must be:

root aws s3 buckets buckets items objects github.com.aquasecurity.defsec.pkg.providers.aws.s3.Contents
Type: object

root aws s3 buckets buckets items website
Type: object

root aws sam
Type: object

root aws sam apis
Type: array of object
No Additional Items

Each item of this array must be:

root aws sam apis github.com.aquasecurity.defsec.pkg.providers.aws.sam.API
Type: object

root aws sam functions
Type: array of object
No Additional Items

Each item of this array must be:

root aws sam functions github.com.aquasecurity.defsec.pkg.providers.aws.sam.Function
Type: object

root aws sns
Type: object

root aws sns topics
Type: array of object
No Additional Items

Each item of this array must be:

root aws sns topics github.com.aquasecurity.defsec.pkg.providers.aws.sns.Topic
Type: object

root aws sqs
Type: object

root aws sqs queues
Type: array of object
No Additional Items

Each item of this array must be:

root aws sqs queues github.com.aquasecurity.defsec.pkg.providers.aws.sqs.Queue
Type: object

root aws ssm
Type: object

root aws ssm secrets
Type: array of object
No Additional Items

Each item of this array must be:

root aws ssm secrets github.com.aquasecurity.defsec.pkg.providers.aws.ssm.Secret
Type: object

root azure
Type: object

root azure compute
Type: object

root azure container
Type: object

root azure container kubernetesclusters
Type: array of object
No Additional Items

Each item of this array must be:

root azure container kubernetesclusters github.com.aquasecurity.defsec.pkg.providers.azure.container.KubernetesCluster
Type: object

root azure database
Type: object

root azure database mssqlservers
Type: array of object
No Additional Items

Each item of this array must be:

root azure database mssqlservers github.com.aquasecurity.defsec.pkg.providers.azure.database.MSSQLServer
Type: object

root azure database mysqlservers
Type: array of object
No Additional Items

Each item of this array must be:

root azure database mysqlservers github.com.aquasecurity.defsec.pkg.providers.azure.database.MySQLServer
Type: object

root azure datafactory
Type: object

root azure datalake
Type: object

root azure datalake stores
Type: array of object
No Additional Items

Each item of this array must be:

root azure datalake stores github.com.aquasecurity.defsec.pkg.providers.azure.datalake.Store
Type: object

root azure keyvault
Type: object

root azure keyvault vaults
Type: array of object
No Additional Items

Each item of this array must be:

root azure keyvault vaults github.com.aquasecurity.defsec.pkg.providers.azure.keyvault.Vault
Type: object

root azure network
Type: object

root azure network securitygroups
Type: array of object
No Additional Items

Each item of this array must be:

root azure network securitygroups github.com.aquasecurity.defsec.pkg.providers.azure.network.SecurityGroup
Type: object

root azure network securitygroups securitygroups items rules
Type: array of object
No Additional Items

Each item of this array must be:

root azure network securitygroups securitygroups items rules github.com.aquasecurity.defsec.pkg.providers.azure.network.SecurityGroupRule
Type: object

root azure storage
Type: object

root azure storage accounts
Type: array of object
No Additional Items

Each item of this array must be:

root azure storage accounts github.com.aquasecurity.defsec.pkg.providers.azure.storage.Account
Type: object

root azure synapse
Type: object

root azure synapse workspaces
Type: array of object
No Additional Items

Each item of this array must be:

root azure synapse workspaces github.com.aquasecurity.defsec.pkg.providers.azure.synapse.Workspace
Type: object

root cloudstack
Type: object

root cloudstack compute
Type: object

root cloudstack compute instances
Type: array of object
No Additional Items

Each item of this array must be:

root cloudstack compute instances github.com.aquasecurity.defsec.pkg.providers.cloudstack.compute.Instance
Type: object

root digitalocean
Type: object

root digitalocean compute
Type: object

root digitalocean compute droplets
Type: array of object
No Additional Items

Each item of this array must be:

root digitalocean compute droplets github.com.aquasecurity.defsec.pkg.providers.digitalocean.compute.Droplet
Type: object

root digitalocean compute firewalls
Type: array of object
No Additional Items

Each item of this array must be:

root digitalocean compute firewalls github.com.aquasecurity.defsec.pkg.providers.digitalocean.compute.Firewall
Type: object

root github
Type: object

root github branchprotections
Type: array of object
No Additional Items

Each item of this array must be:

root github branchprotections github.com.aquasecurity.defsec.pkg.providers.github.BranchProtection
Type: object

root google
Type: object

root google compute
Type: object

root google compute disks
Type: array of object
No Additional Items

Each item of this array must be:

root google compute disks github.com.aquasecurity.defsec.pkg.providers.google.compute.Disk
Type: object

root google compute instances
Type: array of object
No Additional Items

Each item of this array must be:

root google compute instances github.com.aquasecurity.defsec.pkg.providers.google.compute.Instance
Type: object

root google compute instances instances items networkinterfaces
Type: array of object
No Additional Items

Each item of this array must be:

root google compute instances instances items networkinterfaces github.com.aquasecurity.defsec.pkg.providers.google.compute.NetworkInterface
Type: object

root google compute instances instances items networkinterfaces networkinterfaces items network
Type: object

root google compute instances instances items networkinterfaces networkinterfaces items network firewall
Type: object

root google compute instances instances items networkinterfaces networkinterfaces items network firewall egressrules
Type: array of object
No Additional Items

Each item of this array must be:

root google compute instances instances items networkinterfaces networkinterfaces items network firewall egressrules github.com.aquasecurity.defsec.pkg.providers.google.compute.EgressRule
Type: object

root google compute networks
Type: array of object
No Additional Items

Each item of this array must be:

root google compute networks github.com.aquasecurity.defsec.pkg.providers.google.compute.Network
Type: object
Same definition as network

root google gke
Type: object

root google gke clusters
Type: array of object
No Additional Items

Each item of this array must be:

root google gke clusters github.com.aquasecurity.defsec.pkg.providers.google.gke.Cluster
Type: object

root google iam
Type: object

root google iam organizations
Type: array of object
No Additional Items

Each item of this array must be:

root google iam organizations github.com.aquasecurity.defsec.pkg.providers.google.iam.Organization
Type: object

root google iam organizations organizations items folders
Type: array of object
No Additional Items

Each item of this array must be:

root google iam organizations organizations items folders github.com.aquasecurity.defsec.pkg.providers.google.iam.Folder
Type: object

root google kms
Type: object

root google kms keyrings
Type: array of object
No Additional Items

Each item of this array must be:

root google kms keyrings github.com.aquasecurity.defsec.pkg.providers.google.kms.KeyRing
Type: object

root google kms keyrings keyrings items keys
Type: array of object
No Additional Items

Each item of this array must be:

root google kms keyrings keyrings items keys github.com.aquasecurity.defsec.pkg.providers.google.kms.Key
Type: object

root google sql
Type: object

root google sql instances
Type: array of object
No Additional Items

Each item of this array must be:

root google sql instances github.com.aquasecurity.defsec.pkg.providers.google.sql.DatabaseInstance
Type: object

root google sql instances instances items settings
Type: object

root kubernetes
Type: object

root kubernetes networkpolicies
Type: array of object
No Additional Items

Each item of this array must be:

root kubernetes networkpolicies github.com.aquasecurity.defsec.pkg.providers.kubernetes.NetworkPolicy
Type: object

root kubernetes networkpolicies networkpolicies items spec
Type: object

root nifcloud
Type: object

root nifcloud computing
Type: object

root nifcloud dns
Type: object

root nifcloud dns records
Type: array of object
No Additional Items

Each item of this array must be:

root nifcloud dns records github.com.aquasecurity.defsec.pkg.providers.nifcloud.dns.Record
Type: object

root nifcloud nas
Type: object

root nifcloud nas nasinstances
Type: array of object
No Additional Items

Each item of this array must be:

root nifcloud nas nasinstances github.com.aquasecurity.defsec.pkg.providers.nifcloud.nas.NASInstance
Type: object

root nifcloud network
Type: object

root nifcloud network vpngateways
Type: array of object
No Additional Items

Each item of this array must be:

root nifcloud network vpngateways github.com.aquasecurity.defsec.pkg.providers.nifcloud.network.VpnGateway
Type: object

root openstack
Type: object

root openstack compute
Type: object

root openstack compute instances
Type: array of object
No Additional Items

Each item of this array must be:

root openstack compute instances github.com.aquasecurity.defsec.pkg.providers.openstack.Instance
Type: object

root openstack networking
Type: object

root openstack networking securitygroups
Type: array of object
No Additional Items

Each item of this array must be:

root openstack networking securitygroups github.com.aquasecurity.defsec.pkg.providers.openstack.SecurityGroup
Type: object

root oracle
Type: object

root oracle compute
Type: object

\ No newline at end of file + Schema Docs
Type: object

root aws
Type: object

root aws accessanalyzer
Type: object

root aws accessanalyzer analyzers
Type: array of object
No Additional Items

Each item of this array must be:

root aws accessanalyzer analyzers github.com.aquasecurity.trivy.pkg.iac.providers.aws.accessanalyzer.Analyzer
Type: object

root aws apigateway
Type: object

root aws apigateway v1
Type: object

root aws apigateway v1 apis
Type: array of object
No Additional Items

Each item of this array must be:

root aws apigateway v1 apis github.com.aquasecurity.trivy.pkg.iac.providers.aws.apigateway.v1.API
Type: object

root aws apigateway v1 apis apis items stages
Type: array of object
No Additional Items

Each item of this array must be:

root aws apigateway v1 apis apis items stages github.com.aquasecurity.trivy.pkg.iac.providers.aws.apigateway.v1.Stage
Type: object

root aws apigateway v2
Type: object

root aws apigateway v2 apis
Type: array of object
No Additional Items

Each item of this array must be:

root aws apigateway v2 apis github.com.aquasecurity.trivy.pkg.iac.providers.aws.apigateway.v2.API
Type: object

root aws athena
Type: object

root aws athena databases
Type: array of object
No Additional Items

Each item of this array must be:

root aws athena databases github.com.aquasecurity.trivy.pkg.iac.providers.aws.athena.Database
Type: object

root aws cloudfront
Type: object

root aws cloudfront distributions
Type: array of object
No Additional Items

Each item of this array must be:

root aws cloudfront distributions github.com.aquasecurity.trivy.pkg.iac.providers.aws.cloudfront.Distribution
Type: object

root aws cloudtrail
Type: object

root aws cloudtrail trails
Type: array of object
No Additional Items

Each item of this array must be:

root aws cloudtrail trails github.com.aquasecurity.trivy.pkg.iac.providers.aws.cloudtrail.Trail
Type: object

root aws cloudwatch
Type: object

root aws cloudwatch loggroups
Type: array of object
No Additional Items

Each item of this array must be:

root aws cloudwatch loggroups github.com.aquasecurity.trivy.pkg.iac.providers.aws.cloudwatch.LogGroup
Type: object

root aws codebuild
Type: object

root aws config
Type: object

root aws dynamodb
Type: object

root aws dynamodb tables
Type: array of object
No Additional Items

Each item of this array must be:

root aws dynamodb tables github.com.aquasecurity.trivy.pkg.iac.providers.aws.dynamodb.Table
Type: object

root aws ec2
Type: object

root aws ec2 instances
Type: array of object
No Additional Items

Each item of this array must be:

root aws ec2 instances github.com.aquasecurity.trivy.pkg.iac.providers.aws.ec2.Instance
Type: object

root aws ec2 instances instances items securitygroups
Type: array of object
No Additional Items

Each item of this array must be:

root aws ec2 instances instances items securitygroups github.com.aquasecurity.trivy.pkg.iac.providers.aws.ec2.SecurityGroup
Type: object

root aws ec2 subnets
Type: array of object
No Additional Items

Each item of this array must be:

root aws ec2 subnets github.com.aquasecurity.trivy.pkg.iac.providers.aws.ec2.Subnet
Type: object

root aws ec2 volumes
Type: array of object
No Additional Items

Each item of this array must be:

root aws ec2 volumes github.com.aquasecurity.trivy.pkg.iac.providers.aws.ec2.Volume
Type: object

root aws ec2 vpcs
Type: array of object
No Additional Items

Each item of this array must be:

root aws ec2 vpcs github.com.aquasecurity.trivy.pkg.iac.providers.aws.ec2.VPC
Type: object

root aws ecr
Type: object

root aws ecr repositories
Type: array of object
No Additional Items

Each item of this array must be:

root aws ecr repositories github.com.aquasecurity.trivy.pkg.iac.providers.aws.ecr.Repository
Type: object

root aws ecr repositories repositories items policies
Type: array of object
No Additional Items

Each item of this array must be:

root aws ecr repositories repositories items policies github.com.aquasecurity.trivy.pkg.iac.providers.aws.iam.Policy
Type: object

root aws ecs
Type: object

root aws ecs clusters
Type: array of object
No Additional Items

Each item of this array must be:

root aws ecs clusters github.com.aquasecurity.trivy.pkg.iac.providers.aws.ecs.Cluster
Type: object

root aws ecs taskdefinitions
Type: array of object
No Additional Items

Each item of this array must be:

root aws ecs taskdefinitions github.com.aquasecurity.trivy.pkg.iac.providers.aws.ecs.TaskDefinition
Type: object

root aws ecs taskdefinitions taskdefinitions items containerdefinitions
Type: array of object
No Additional Items

Each item of this array must be:

root aws ecs taskdefinitions taskdefinitions items containerdefinitions github.com.aquasecurity.trivy.pkg.iac.providers.aws.ecs.ContainerDefinition
Type: object

root aws efs
Type: object

root aws efs filesystems
Type: array of object
No Additional Items

Each item of this array must be:

root aws efs filesystems github.com.aquasecurity.trivy.pkg.iac.providers.aws.efs.FileSystem
Type: object

root aws eks
Type: object

root aws elasticache
Type: object

root aws elasticsearch
Type: object

root aws elasticsearch domains
Type: array of object
No Additional Items

Each item of this array must be:

root aws elasticsearch domains github.com.aquasecurity.trivy.pkg.iac.providers.aws.elasticsearch.Domain
Type: object

root aws elb
Type: object

root aws elb loadbalancers
Type: array of object
No Additional Items

Each item of this array must be:

root aws elb loadbalancers github.com.aquasecurity.trivy.pkg.iac.providers.aws.elb.LoadBalancer
Type: object

root aws emr
Type: object

root aws emr clusters
Type: array of object
No Additional Items

Each item of this array must be:

root aws emr clusters github.com.aquasecurity.trivy.pkg.iac.providers.aws.emr.Cluster
Type: object

root aws iam
Type: object

root aws iam groups
Type: array of object
No Additional Items

Each item of this array must be:

root aws iam groups github.com.aquasecurity.trivy.pkg.iac.providers.aws.iam.Group
Type: object

root aws iam groups groups items users
Type: array of object
No Additional Items

Each item of this array must be:

root aws iam groups groups items users github.com.aquasecurity.trivy.pkg.iac.providers.aws.iam.User
Type: object

root aws iam groups groups items users users items accesskeys
Type: array of object
No Additional Items

Each item of this array must be:

root aws iam groups groups items users users items accesskeys github.com.aquasecurity.trivy.pkg.iac.providers.aws.iam.AccessKey
Type: object

root aws iam policies
Type: array of object
No Additional Items

Each item of this array must be:

root aws iam policies github.com.aquasecurity.trivy.pkg.iac.providers.aws.iam.Policy
Type: object
Same definition as aws_ecr_repositories_items_policies_items

root aws iam roles
Type: array of object
No Additional Items

Each item of this array must be:

root aws iam roles github.com.aquasecurity.trivy.pkg.iac.providers.aws.iam.Role
Type: object

root aws iam users
Type: array of object
No Additional Items

Each item of this array must be:

root aws iam users github.com.aquasecurity.trivy.pkg.iac.providers.aws.iam.User
Type: object
Same definition as aws_iam_groups_items_users_items

root aws kinesis
Type: object

root aws kinesis streams
Type: array of object
No Additional Items

Each item of this array must be:

root aws kinesis streams github.com.aquasecurity.trivy.pkg.iac.providers.aws.kinesis.Stream
Type: object

root aws kms
Type: object

root aws kms keys
Type: array of object
No Additional Items

Each item of this array must be:

root aws kms keys github.com.aquasecurity.trivy.pkg.iac.providers.aws.kms.Key
Type: object

root aws lambda
Type: object

root aws meta
Type: object

root aws meta tfproviders
Type: array of object
No Additional Items

Each item of this array must be:

root aws meta tfproviders github.com.aquasecurity.trivy.pkg.iac.providers.aws.TerraformProvider
Type: object

root aws meta tfproviders tfproviders items assumerole
Type: object

root aws mq
Type: object

root aws mq brokers
Type: array of object
No Additional Items

Each item of this array must be:

root aws mq brokers github.com.aquasecurity.trivy.pkg.iac.providers.aws.mq.Broker
Type: object

root aws neptune
Type: object

root aws neptune clusters
Type: array of object
No Additional Items

Each item of this array must be:

root aws neptune clusters github.com.aquasecurity.trivy.pkg.iac.providers.aws.neptune.Cluster
Type: object

root aws rds
Type: object

root aws rds classic
Type: object

root aws rds classic dbsecuritygroups
Type: array of object
No Additional Items

Each item of this array must be:

root aws rds classic dbsecuritygroups github.com.aquasecurity.trivy.pkg.iac.providers.aws.rds.DBSecurityGroup
Type: object

root aws rds clusters
Type: array of object
No Additional Items

Each item of this array must be:

root aws rds clusters github.com.aquasecurity.trivy.pkg.iac.providers.aws.rds.Cluster
Type: object

root aws rds clusters clusters items instances
Type: array of object
No Additional Items

Each item of this array must be:

root aws rds clusters clusters items instances github.com.aquasecurity.trivy.pkg.iac.providers.aws.rds.ClusterInstance
Type: object

root aws rds clusters clusters items instances instances items instance
Type: object

root aws rds instances
Type: array of object
No Additional Items

Each item of this array must be:

root aws rds instances github.com.aquasecurity.trivy.pkg.iac.providers.aws.rds.Instance
Type: object
Same definition as instance

root aws redshift
Type: object

root aws redshift clusters
Type: array of object
No Additional Items

Each item of this array must be:

root aws redshift clusters github.com.aquasecurity.trivy.pkg.iac.providers.aws.redshift.Cluster
Type: object

root aws redshift reservednodes
Type: array of object
No Additional Items

Each item of this array must be:

root aws redshift reservednodes github.com.aquasecurity.trivy.pkg.iac.providers.aws.redshift.ReservedNode
Type: object

root aws redshift securitygroups
Type: array of object
No Additional Items

Each item of this array must be:

root aws redshift securitygroups github.com.aquasecurity.trivy.pkg.iac.providers.aws.redshift.SecurityGroup
Type: object

root aws s3
Type: object

root aws s3 buckets
Type: array of object
No Additional Items

Each item of this array must be:

root aws s3 buckets github.com.aquasecurity.trivy.pkg.iac.providers.aws.s3.Bucket
Type: object

root aws s3 buckets buckets items objects
Type: array of object
No Additional Items

Each item of this array must be:

root aws s3 buckets buckets items objects github.com.aquasecurity.trivy.pkg.iac.providers.aws.s3.Contents
Type: object

root aws s3 buckets buckets items website
Type: object

root aws sam
Type: object

root aws sam apis
Type: array of object
No Additional Items

Each item of this array must be:

root aws sam apis github.com.aquasecurity.trivy.pkg.iac.providers.aws.sam.API
Type: object

root aws sam functions
Type: array of object
No Additional Items

Each item of this array must be:

root aws sam functions github.com.aquasecurity.trivy.pkg.iac.providers.aws.sam.Function
Type: object

root aws sns
Type: object

root aws sns topics
Type: array of object
No Additional Items

Each item of this array must be:

root aws sns topics github.com.aquasecurity.trivy.pkg.iac.providers.aws.sns.Topic
Type: object

root aws sqs
Type: object

root aws sqs queues
Type: array of object
No Additional Items

Each item of this array must be:

root aws sqs queues github.com.aquasecurity.trivy.pkg.iac.providers.aws.sqs.Queue
Type: object

root aws ssm
Type: object

root aws ssm secrets
Type: array of object
No Additional Items

Each item of this array must be:

root aws ssm secrets github.com.aquasecurity.trivy.pkg.iac.providers.aws.ssm.Secret
Type: object

root azure
Type: object

root azure compute
Type: object

root azure container
Type: object

root azure container kubernetesclusters
Type: array of object
No Additional Items

Each item of this array must be:

root azure container kubernetesclusters github.com.aquasecurity.trivy.pkg.iac.providers.azure.container.KubernetesCluster
Type: object

root azure database
Type: object

root azure database mssqlservers
Type: array of object
No Additional Items

Each item of this array must be:

root azure database mssqlservers github.com.aquasecurity.trivy.pkg.iac.providers.azure.database.MSSQLServer
Type: object

root azure database mysqlservers
Type: array of object
No Additional Items

Each item of this array must be:

root azure database mysqlservers github.com.aquasecurity.trivy.pkg.iac.providers.azure.database.MySQLServer
Type: object

root azure datafactory
Type: object

root azure datalake
Type: object

root azure datalake stores
Type: array of object
No Additional Items

Each item of this array must be:

root azure datalake stores github.com.aquasecurity.trivy.pkg.iac.providers.azure.datalake.Store
Type: object

root azure keyvault
Type: object

root azure keyvault vaults
Type: array of object
No Additional Items

Each item of this array must be:

root azure keyvault vaults github.com.aquasecurity.trivy.pkg.iac.providers.azure.keyvault.Vault
Type: object

root azure network
Type: object

root azure network securitygroups
Type: array of object
No Additional Items

Each item of this array must be:

root azure network securitygroups github.com.aquasecurity.trivy.pkg.iac.providers.azure.network.SecurityGroup
Type: object

root azure network securitygroups securitygroups items rules
Type: array of object
No Additional Items

Each item of this array must be:

root azure network securitygroups securitygroups items rules github.com.aquasecurity.trivy.pkg.iac.providers.azure.network.SecurityGroupRule
Type: object

root azure storage
Type: object

root azure storage accounts
Type: array of object
No Additional Items

Each item of this array must be:

root azure storage accounts github.com.aquasecurity.trivy.pkg.iac.providers.azure.storage.Account
Type: object

root azure synapse
Type: object

root azure synapse workspaces
Type: array of object
No Additional Items

Each item of this array must be:

root azure synapse workspaces github.com.aquasecurity.trivy.pkg.iac.providers.azure.synapse.Workspace
Type: object

root cloudstack
Type: object

root cloudstack compute
Type: object

root cloudstack compute instances
Type: array of object
No Additional Items

Each item of this array must be:

root cloudstack compute instances github.com.aquasecurity.trivy.pkg.iac.providers.cloudstack.compute.Instance
Type: object

root digitalocean
Type: object

root digitalocean compute
Type: object

root digitalocean compute droplets
Type: array of object
No Additional Items

Each item of this array must be:

root digitalocean compute droplets github.com.aquasecurity.trivy.pkg.iac.providers.digitalocean.compute.Droplet
Type: object

root digitalocean compute firewalls
Type: array of object
No Additional Items

Each item of this array must be:

root digitalocean compute firewalls github.com.aquasecurity.trivy.pkg.iac.providers.digitalocean.compute.Firewall
Type: object

root github
Type: object

root github branchprotections
Type: array of object
No Additional Items

Each item of this array must be:

root github branchprotections github.com.aquasecurity.trivy.pkg.iac.providers.github.BranchProtection
Type: object

root google
Type: object

root google compute
Type: object

root google compute disks
Type: array of object
No Additional Items

Each item of this array must be:

root google compute disks github.com.aquasecurity.trivy.pkg.iac.providers.google.compute.Disk
Type: object

root google compute instances
Type: array of object
No Additional Items

Each item of this array must be:

root google compute instances github.com.aquasecurity.trivy.pkg.iac.providers.google.compute.Instance
Type: object

root google compute instances instances items networkinterfaces
Type: array of object
No Additional Items

Each item of this array must be:

root google compute instances instances items networkinterfaces github.com.aquasecurity.trivy.pkg.iac.providers.google.compute.NetworkInterface
Type: object

root google compute instances instances items networkinterfaces networkinterfaces items network
Type: object

root google compute instances instances items networkinterfaces networkinterfaces items network firewall
Type: object

root google compute instances instances items networkinterfaces networkinterfaces items network firewall egressrules
Type: array of object
No Additional Items

Each item of this array must be:

root google compute instances instances items networkinterfaces networkinterfaces items network firewall egressrules github.com.aquasecurity.trivy.pkg.iac.providers.google.compute.EgressRule
Type: object

root google compute networks
Type: array of object
No Additional Items

Each item of this array must be:

root google compute networks github.com.aquasecurity.trivy.pkg.iac.providers.google.compute.Network
Type: object
Same definition as network

root google gke
Type: object

root google gke clusters
Type: array of object
No Additional Items

Each item of this array must be:

root google gke clusters github.com.aquasecurity.trivy.pkg.iac.providers.google.gke.Cluster
Type: object

root google iam
Type: object

root google iam organizations
Type: array of object
No Additional Items

Each item of this array must be:

root google iam organizations github.com.aquasecurity.trivy.pkg.iac.providers.google.iam.Organization
Type: object

root google iam organizations organizations items folders
Type: array of object
No Additional Items

Each item of this array must be:

root google iam organizations organizations items folders github.com.aquasecurity.trivy.pkg.iac.providers.google.iam.Folder
Type: object

root google kms
Type: object

root google kms keyrings
Type: array of object
No Additional Items

Each item of this array must be:

root google kms keyrings github.com.aquasecurity.trivy.pkg.iac.providers.google.kms.KeyRing
Type: object

root google sql
Type: object

root google sql instances
Type: array of object
No Additional Items

Each item of this array must be:

root google sql instances github.com.aquasecurity.trivy.pkg.iac.providers.google.sql.DatabaseInstance
Type: object

root google sql instances instances items settings
Type: object

root kubernetes
Type: object

root kubernetes networkpolicies
Type: array of object
No Additional Items

Each item of this array must be:

root kubernetes networkpolicies github.com.aquasecurity.trivy.pkg.iac.providers.kubernetes.NetworkPolicy
Type: object

root kubernetes networkpolicies networkpolicies items spec
Type: object

root nifcloud
Type: object

root nifcloud computing
Type: object

root nifcloud dns
Type: object

root nifcloud dns records
Type: array of object
No Additional Items

Each item of this array must be:

root nifcloud dns records github.com.aquasecurity.trivy.pkg.iac.providers.nifcloud.dns.Record
Type: object

root nifcloud nas
Type: object

root nifcloud nas nasinstances
Type: array of object
No Additional Items

Each item of this array must be:

root nifcloud nas nasinstances github.com.aquasecurity.trivy.pkg.iac.providers.nifcloud.nas.NASInstance
Type: object

root nifcloud network
Type: object

root nifcloud network vpngateways
Type: array of object
No Additional Items

Each item of this array must be:

root nifcloud network vpngateways github.com.aquasecurity.trivy.pkg.iac.providers.nifcloud.network.VpnGateway
Type: object

root openstack
Type: object

root openstack compute
Type: object

root openstack compute instances
Type: array of object
No Additional Items

Each item of this array must be:

root openstack compute instances github.com.aquasecurity.trivy.pkg.iac.providers.openstack.Instance
Type: object

root openstack networking
Type: object

root openstack networking securitygroups
Type: array of object
No Additional Items

Each item of this array must be:

root openstack networking securitygroups github.com.aquasecurity.trivy.pkg.iac.providers.openstack.SecurityGroup
Type: object

root oracle
Type: object

root oracle compute
Type: object

\ No newline at end of file