Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(terraform): add CKV NCP rules about access control group outbound rule. #3624

Merged
merged 46 commits into from
Oct 19, 2022

Conversation

Floodnut
Copy link
Contributor

@Floodnut Floodnut commented Oct 8, 2022

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Description

Add terraform scan rules about provider Naver Cloud Platform.

CKV_NCP_3 is associated with Access Control Group Outbound Rule.
This rule suggests no access control groups allow outbound from 0.0.0.0:0 to port.

Description

Checklist:

  • My code follows the style guidelines of this project
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have added tests that prove my feature, policy, or fix is effective and works
  • New and existing tests pass locally with my changes
  • Any dependent changes have been merged and published in downstream modules

pj991207 and others added 30 commits September 27, 2022 14:52
Copy link
Contributor

@gruebel gruebel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice work, left some comments

Copy link
Contributor

@gruebel gruebel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks, looks great 🍻

Copy link
Contributor

@Eliran-Turgeman Eliran-Turgeman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looking great!
Added a few suggestions

@Floodnut
Copy link
Contributor Author

I adjust additional suggestion!

@gruebel gruebel merged commit 5d8c9fe into bridgecrewio:master Oct 19, 2022
ugrave pushed a commit to ugrave/checkov that referenced this pull request Oct 20, 2022
…d rule. (bridgecrewio#3624)

* [22.09.27][추가] CKV_NCP_1

* [22.09.27][추가] CKV_NCP_2

* Apply suggestions from code review

Co-authored-by: Anton Grübel <[email protected]>

* Apply suggestions from code review

Co-authored-by: Anton Grübel <[email protected]>

* Apply suggestions from code review

Co-authored-by: Anton Grübel <[email protected]>

* Create main.yml

* [22.09.28][수정] Lint test

* Delete main.yml

* [22.09.29][수정]testcode 수정

* [22.09.29][수정] 테스트 코드 수정

* [22.09.29][수정] 테스트코드 수정

* [22.09.29][수정] add test resource for 'ncloud_access_control_group_rule'

* [22.10.03][add]CKV_AWS_3 RULE

* [22.10.04][add]CKV_NCP_4, CKV_NCP_5 RULE

* [22.10.04][add] NCP ACG Inbound for port 22, 3389

* [22.10.04][add] NCP NACL for port 20, 21, 22, 3389

* [22.10.05][modify] LBSecureProtocols.py

* [22.10.05][add] NCP ACGIngress & Egress Check

* [22.10.06][add] NCP rules about ACG, LB, NACL, Encrpytion

* [22.10.06][refactor] rename rules

* [22.10.07][add] NCP NACLPortCheck

* [22.10.08][refactor] modify rule id 77 to 14

* [22.10.09][refactor] modify branch for ncp tf3

* [22.10.09][fix] fix branch unmerged error

* [22.10.09][fix] fix branch unmerged error

* [22.10.11][refactor] fix lint

* Update checkov/terraform/checks/resource/ncp/AccessControlGroupOutboundRule.py

[22.10.12][fix]follow guidline

Co-authored-by: Anton Grübel <[email protected]>

* [22.10.12][fix] CKV_NCP_3 AccessControlGroupOutboundRule name

Co-authored-by: Anton Grübel <[email protected]>

* [22.10.12][delete]LBTargetGroupHTTPS test code

it is not associated with ckv_ncp_3

* [22.10.12][fix] CKV_NCP_3 AccessControlGroupOutboundRule

Co-authored-by: Anton Grübel <[email protected]>

* [22.10.13][fix] fix undefined variable error

* [22.10.03][add]CKV_AWS_3 RULE

* [22.10.19][refactor] adjust ncp rule-3

Co-authored-by: pj991207 <[email protected]>
Co-authored-by: Anton Grübel <[email protected]>
Co-authored-by: taeng0204 <[email protected]>
Co-authored-by: yudam <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants