revert new cert and add entry to hmpps-domain-services san #7169

robertsweetman · 2024-07-22T13:00:51Z

No description provided.

github-actions · 2024-07-22T13:03:23Z

`Trivy Scan` Success

Show Output

```hcl

Trivy will check the following folders:
terraform/environments/hmpps-domain-services terraform/environments/planetfm

Running Trivy in terraform/environments/hmpps-domain-services
2024-07-22T13:02:57Z INFO Need to update DB
2024-07-22T13:02:57Z INFO Downloading DB... repository="ghcr.io/aquasecurity/trivy-db:2"
2024-07-22T13:02:59Z INFO Vulnerability scanning is enabled
2024-07-22T13:02:59Z INFO Misconfiguration scanning is enabled
2024-07-22T13:02:59Z INFO Need to update the built-in policies
2024-07-22T13:02:59Z INFO Downloading the built-in policies...
74.86 KiB / 74.86 KiB [-----------------------------------------------------------] 100.00% ? p/s 0s2024-07-22T13:02:59Z INFO Secret scanning is enabled
2024-07-22T13:02:59Z INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-07-22T13:02:59Z INFO Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-07-22T13:03:01Z INFO Number of language-specific files num=0
2024-07-22T13:03:01Z INFO Detected config files num=6

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)

Tests: 16 (SUCCESSES: 5, FAILURES: 0, EXCEPTIONS: 11)
Failures: 0 (HIGH: 0, CRITICAL: 0)

trivy_exitcode=0

Running Trivy in terraform/environments/planetfm
2024-07-22T13:03:02Z INFO Vulnerability scanning is enabled
2024-07-22T13:03:02Z INFO Misconfiguration scanning is enabled
2024-07-22T13:03:02Z INFO Secret scanning is enabled
2024-07-22T13:03:02Z INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-07-22T13:03:02Z INFO Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-07-22T13:03:04Z INFO Number of language-specific files num=0
2024-07-22T13:03:04Z INFO Detected config files num=7

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)

Tests: 16 (SUCCESSES: 5, FAILURES: 0, EXCEPTIONS: 11)
Failures: 0 (HIGH: 0, CRITICAL: 0)

trivy_exitcode=0

</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:
terraform/environments/hmpps-domain-services terraform/environments/planetfm

*****************************

Running Checkov in terraform/environments/hmpps-domain-services
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-07-22 13:03:06,659 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-ssm-patching.git?ref=v3.1.0:None (for external modules, the --download-external-modules flag is required)
2024-07-22 13:03:06,659 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-ssm-patching.git?ref=v3.0.0:None (for external modules, the --download-external-modules flag is required)
terraform scan results:

Passed checks: 126, Failed checks: 0, Skipped checks: 24


checkov_exitcode=0

*****************************

Running Checkov in terraform/environments/planetfm
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
terraform scan results:

Passed checks: 137, Failed checks: 0, Skipped checks: 24


checkov_exitcode=0

`CTFLint Scan` Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.5.0)
tflint will check the following folders:
terraform/environments/hmpps-domain-services terraform/environments/planetfm

*****************************

Running tflint in terraform/environments/hmpps-domain-services
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

*****************************

Running tflint in terraform/environments/planetfm
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

`Trivy Scan` Success

Show Output

*****************************

Trivy will check the following folders:
terraform/environments/hmpps-domain-services terraform/environments/planetfm

*****************************

Running Trivy in terraform/environments/hmpps-domain-services
2024-07-22T13:02:57Z	INFO	Need to update DB
2024-07-22T13:02:57Z	INFO	Downloading DB...	repository="ghcr.io/aquasecurity/trivy-db:2"
2024-07-22T13:02:59Z	INFO	Vulnerability scanning is enabled
2024-07-22T13:02:59Z	INFO	Misconfiguration scanning is enabled
2024-07-22T13:02:59Z	INFO	Need to update the built-in policies
2024-07-22T13:02:59Z	INFO	Downloading the built-in policies...
74.86 KiB / 74.86 KiB [-----------------------------------------------------------] 100.00% ? p/s 0s2024-07-22T13:02:59Z	INFO	Secret scanning is enabled
2024-07-22T13:02:59Z	INFO	If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-07-22T13:02:59Z	INFO	Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-07-22T13:03:01Z	INFO	Number of language-specific files	num=0
2024-07-22T13:03:01Z	INFO	Detected config files	num=6

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)
============================================================================================================================================
Tests: 16 (SUCCESSES: 5, FAILURES: 0, EXCEPTIONS: 11)
Failures: 0 (HIGH: 0, CRITICAL: 0)

trivy_exitcode=0

*****************************

Running Trivy in terraform/environments/planetfm
2024-07-22T13:03:02Z	INFO	Vulnerability scanning is enabled
2024-07-22T13:03:02Z	INFO	Misconfiguration scanning is enabled
2024-07-22T13:03:02Z	INFO	Secret scanning is enabled
2024-07-22T13:03:02Z	INFO	If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-07-22T13:03:02Z	INFO	Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-07-22T13:03:04Z	INFO	Number of language-specific files	num=0
2024-07-22T13:03:04Z	INFO	Detected config files	num=7

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)
============================================================================================================================================
Tests: 16 (SUCCESSES: 5, FAILURES: 0, EXCEPTIONS: 11)
Failures: 0 (HIGH: 0, CRITICAL: 0)

trivy_exitcode=0

github-actions · 2024-07-22T13:08:10Z

`Trivy Scan` Success

Show Output

```hcl

Trivy will check the following folders:
terraform/environments/hmpps-domain-services terraform/environments/planetfm

Running Trivy in terraform/environments/hmpps-domain-services
2024-07-22T13:07:40Z INFO Need to update DB
2024-07-22T13:07:40Z INFO Downloading DB... repository="ghcr.io/aquasecurity/trivy-db:2"
2024-07-22T13:07:42Z INFO Vulnerability scanning is enabled
2024-07-22T13:07:42Z INFO Misconfiguration scanning is enabled
2024-07-22T13:07:42Z INFO Need to update the built-in policies
2024-07-22T13:07:42Z INFO Downloading the built-in policies...
74.86 KiB / 74.86 KiB [-----------------------------------------------------------] 100.00% ? p/s 0s2024-07-22T13:07:42Z INFO Secret scanning is enabled
2024-07-22T13:07:42Z INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-07-22T13:07:42Z INFO Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-07-22T13:07:45Z INFO Number of language-specific files num=0
2024-07-22T13:07:45Z INFO Detected config files num=6

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)

Tests: 16 (SUCCESSES: 5, FAILURES: 0, EXCEPTIONS: 11)
Failures: 0 (HIGH: 0, CRITICAL: 0)

trivy_exitcode=0

Running Trivy in terraform/environments/planetfm
2024-07-22T13:07:46Z INFO Vulnerability scanning is enabled
2024-07-22T13:07:46Z INFO Misconfiguration scanning is enabled
2024-07-22T13:07:46Z INFO Secret scanning is enabled
2024-07-22T13:07:46Z INFO If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-07-22T13:07:46Z INFO Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-07-22T13:07:48Z INFO Number of language-specific files num=0
2024-07-22T13:07:48Z INFO Detected config files num=7

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)

Tests: 16 (SUCCESSES: 5, FAILURES: 0, EXCEPTIONS: 11)
Failures: 0 (HIGH: 0, CRITICAL: 0)

trivy_exitcode=0

</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:
terraform/environments/hmpps-domain-services terraform/environments/planetfm

*****************************

Running Checkov in terraform/environments/hmpps-domain-services
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-07-22 13:07:51,468 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-ssm-patching.git?ref=v3.1.0:None (for external modules, the --download-external-modules flag is required)
2024-07-22 13:07:51,468 [MainThread  ] [WARNI]  Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-ssm-patching.git?ref=v3.0.0:None (for external modules, the --download-external-modules flag is required)
terraform scan results:

Passed checks: 126, Failed checks: 0, Skipped checks: 24


checkov_exitcode=0

*****************************

Running Checkov in terraform/environments/planetfm
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
terraform scan results:

Passed checks: 137, Failed checks: 0, Skipped checks: 24


checkov_exitcode=0

`CTFLint Scan` Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.5.0)
tflint will check the following folders:
terraform/environments/hmpps-domain-services terraform/environments/planetfm

*****************************

Running tflint in terraform/environments/hmpps-domain-services
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

*****************************

Running tflint in terraform/environments/planetfm
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

`Trivy Scan` Success

Show Output

*****************************

Trivy will check the following folders:
terraform/environments/hmpps-domain-services terraform/environments/planetfm

*****************************

Running Trivy in terraform/environments/hmpps-domain-services
2024-07-22T13:07:40Z	INFO	Need to update DB
2024-07-22T13:07:40Z	INFO	Downloading DB...	repository="ghcr.io/aquasecurity/trivy-db:2"
2024-07-22T13:07:42Z	INFO	Vulnerability scanning is enabled
2024-07-22T13:07:42Z	INFO	Misconfiguration scanning is enabled
2024-07-22T13:07:42Z	INFO	Need to update the built-in policies
2024-07-22T13:07:42Z	INFO	Downloading the built-in policies...
74.86 KiB / 74.86 KiB [-----------------------------------------------------------] 100.00% ? p/s 0s2024-07-22T13:07:42Z	INFO	Secret scanning is enabled
2024-07-22T13:07:42Z	INFO	If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-07-22T13:07:42Z	INFO	Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-07-22T13:07:45Z	INFO	Number of language-specific files	num=0
2024-07-22T13:07:45Z	INFO	Detected config files	num=6

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)
============================================================================================================================================
Tests: 16 (SUCCESSES: 5, FAILURES: 0, EXCEPTIONS: 11)
Failures: 0 (HIGH: 0, CRITICAL: 0)

trivy_exitcode=0

*****************************

Running Trivy in terraform/environments/planetfm
2024-07-22T13:07:46Z	INFO	Vulnerability scanning is enabled
2024-07-22T13:07:46Z	INFO	Misconfiguration scanning is enabled
2024-07-22T13:07:46Z	INFO	Secret scanning is enabled
2024-07-22T13:07:46Z	INFO	If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-07-22T13:07:46Z	INFO	Please see also https://aquasecurity.github.io/trivy/v0.53/docs/scanner/secret#recommendation for faster secret detection
2024-07-22T13:07:48Z	INFO	Number of language-specific files	num=0
2024-07-22T13:07:48Z	INFO	Detected config files	num=7

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)
============================================================================================================================================
Tests: 16 (SUCCESSES: 5, FAILURES: 0, EXCEPTIONS: 11)
Failures: 0 (HIGH: 0, CRITICAL: 0)

trivy_exitcode=0

revert new cert and add entry to hmpps-domain-services san

8bf894b

robertsweetman requested review from a team as code owners July 22, 2024 13:00

github-actions bot added the environments-repository Used to exclude PRs from this repo in our Slack PR update label Jul 22, 2024

create a new cert

07a90db

drobinson-moj approved these changes Jul 22, 2024

View reviewed changes

robertsweetman merged commit f2b63a6 into main Jul 22, 2024
26 checks passed

robertsweetman deleted the planetfm/DSOS-2894/revert-cert-creation-create-new-hmpps-domain-services-cert-entry branch July 22, 2024 13:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

revert new cert and add entry to hmpps-domain-services san #7169

revert new cert and add entry to hmpps-domain-services san #7169

robertsweetman commented Jul 22, 2024

github-actions bot commented Jul 22, 2024

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)

github-actions bot commented Jul 22, 2024

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)

revert new cert and add entry to hmpps-domain-services san #7169

revert new cert and add entry to hmpps-domain-services san #7169

Conversation

robertsweetman commented Jul 22, 2024

github-actions bot commented Jul 22, 2024

Trivy Scan Success

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)

CTFLint Scan Success

Trivy Scan Success

github-actions bot commented Jul 22, 2024

Trivy Scan Success

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)

github.com/ministryofjustice/modernisation-platform-terraform-bastion-linux?ref=836db079348a2b40d59bd9cb953111e8ad61aec1/main.tf (terraform)

CTFLint Scan Success

Trivy Scan Success

`Trivy Scan` Success

`CTFLint Scan` Success

`Trivy Scan` Success

`Trivy Scan` Success

`CTFLint Scan` Success

`Trivy Scan` Success