Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(engine): similarity id improve #6970

Merged
merged 63 commits into from
May 16, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
63 commits
Select commit Hold shift + click to select a range
9cf73b6
start unique
JoaoAtGit Mar 25, 2024
453c7a4
just a test
JoaoAtGit Mar 25, 2024
88af720
Merge branch 'master' into joaom/kics-1361
JoaoAtGit Mar 25, 2024
8e98b46
fix
JoaoAtGit Mar 25, 2024
41d846b
Merge branch 'joaom/kics-1361' of github.com:Checkmarx/kics into joao…
JoaoAtGit Mar 25, 2024
428f72d
linter
JoaoAtGit Mar 25, 2024
320ccbb
linter
JoaoAtGit Mar 25, 2024
be32398
e2e
JoaoAtGit Mar 25, 2024
234a690
linter
JoaoAtGit Mar 25, 2024
70fabd4
improve e2e
JoaoAtGit Mar 25, 2024
ed1d1df
fix e2e 32
JoaoAtGit Mar 25, 2024
9b00138
fix
JoaoAtGit Mar 26, 2024
7bd8b7d
Merge branch 'master' into joaom/kics-1361
JoaoAtGit Mar 26, 2024
cd36a77
linter
JoaoAtGit Mar 26, 2024
7a98a65
linter
JoaoAtGit Mar 26, 2024
58c091e
linter
JoaoAtGit Mar 26, 2024
4702ec7
fix 32
JoaoAtGit Mar 26, 2024
219a54b
fix e2e
JoaoAtGit Mar 27, 2024
4d9ebe3
e2e fix
JoaoAtGit Mar 27, 2024
ded9a93
wip
JoaoAtGit Mar 27, 2024
0432f98
delete file test
JoaoAtGit Mar 27, 2024
dfa22f7
Merge branch 'master' into joaom/kics-1361
JoaoAtGit Apr 3, 2024
e671c6d
improve queries
JoaoAtGit Apr 4, 2024
339a664
Merge branch 'master' into joaom/kics-1361
JoaoAtGit Apr 5, 2024
55847ab
Merge branch 'master' into joaom/kics-1361
JoaoAtGit Apr 5, 2024
bb42b95
fix e2e
JoaoAtGit Apr 5, 2024
304d4e0
Merge branch 'joaom/kics-1361' of github.com:Checkmarx/kics into joao…
JoaoAtGit Apr 5, 2024
3024fc5
Merge branch 'master' into joaom/kics-1361
JoaoAtGit Apr 5, 2024
2abcbe1
Merge branch 'refs/heads/master' into joaom/kics-1361
JoaoAtGit Apr 23, 2024
3219250
Merge branch 'refs/heads/master' into joaom/kics-1361
JoaoAtGit Apr 24, 2024
bc6e35c
implement kics_compute_new_simid
JoaoAtGit Apr 24, 2024
24bae5a
Merge branch 'master' into joaom/kics-1361
JoaoAtGit Apr 24, 2024
bfb89f2
Merge branch 'refs/heads/master' into joaom/kics-1361
JoaoAtGit Apr 24, 2024
9e20a7d
Merge branch 'joaom/kics-1361' of github.com:Checkmarx/kics into joao…
JoaoAtGit Apr 24, 2024
3923a28
fix UT
JoaoAtGit Apr 29, 2024
8157136
Merge branch 'master' into joaom/kics-1361
JoaoAtGit Apr 29, 2024
6c5c5bd
wip
JoaoAtGit Apr 29, 2024
1627f74
linter
JoaoAtGit Apr 29, 2024
7ba95ca
Merge branch 'master' into joaom/kics-1361
JoaoAtGit Apr 29, 2024
af94782
wip
JoaoAtGit Apr 29, 2024
23259b7
Merge branch 'joaom/kics-1361' of github.com:Checkmarx/kics into joao…
JoaoAtGit Apr 29, 2024
4bcf6a3
cut the line linter
JoaoAtGit Apr 29, 2024
7ef068b
fix typo
JoaoAtGit Apr 29, 2024
75b8243
fix e2e
JoaoAtGit Apr 29, 2024
ab931c5
fix e2e
JoaoAtGit Apr 29, 2024
ceb0054
clean files
JoaoAtGit Apr 29, 2024
c3857f7
Merge branch 'refs/heads/master' into joaom/kics-1361
JoaoAtGit May 13, 2024
b3bc9cc
remove unused
JoaoAtGit May 13, 2024
cf82c7a
Merge branch 'refs/heads/master' into joaom/kics-1361
JoaoAtGit May 14, 2024
62a93b1
Merge branch 'master' into joaom/kics-1361
cx-andrep May 15, 2024
9e9b3eb
Merge branch 'refs/heads/master' into joaom/kics-1361
JoaoAtGit May 15, 2024
6dfa2f3
fix 95
JoaoAtGit May 15, 2024
f2a326d
Merge branch 'joaom/kics-1361' of github.com:Checkmarx/kics into joao…
JoaoAtGit May 15, 2024
23448cb
fix 94
JoaoAtGit May 15, 2024
0f1d637
89
JoaoAtGit May 15, 2024
b141995
93
JoaoAtGit May 15, 2024
dd38a71
93
JoaoAtGit May 15, 2024
2dec9cb
96/97
JoaoAtGit May 16, 2024
a49effb
91
JoaoAtGit May 16, 2024
8b00595
91
JoaoAtGit May 16, 2024
9763ffd
91
JoaoAtGit May 16, 2024
3e9d7dd
Merge branch 'master' into joaom/kics-1361
cx-andrep May 16, 2024
cced901
Merge branch 'master' into joaom/kics-1361
cx-andrep May 16, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions assets/libraries/cloudformation.rego
Original file line number Diff line number Diff line change
Expand Up @@ -258,3 +258,11 @@ getPath(path) = result {
count(path) == 0
result := ""
}

createSearchKey(elem) = search {
not elem.Name.Ref
search := sprintf("=%s", [elem.Name])
} else = search {
elem.Name.Ref
search := sprintf(".Ref=%s", [elem.Name.Ref])
}
Original file line number Diff line number Diff line change
Expand Up @@ -9,14 +9,17 @@ CxPolicy[result] {
contDef := resource.Properties.ContainerDefinitions[idx]
not common_lib.valid_key(contDef, "HealthCheck")

getkey := cf_lib.createSearchKey(contDef)
searchkey := sprintf("Resources.%s.Properties.ContainerDefinitions.%v.Name%s", [name,idx,getkey])

result := {
"documentId": input.document[i].id,
"resourceType": resource.Type,
"resourceName": cf_lib.get_resource_name(resource, name),
"searchKey": sprintf("Resources.%s.Properties.ContainerDefinitions", [name]),
"searchKey": searchkey,
"issueType": "MissingAttribute",
"keyExpectedValue": sprintf("'Resources.%s.Properties.ContainerDefinitions' should contain 'HealthCheck' property", [name]),
"keyActualValue": sprintf("'Resources.%s.Properties.ContainerDefinitions' doesn't contain 'HealthCheck' property", [name]),
"searchLine": common_lib.build_search_line(["Resources", name, "Properties", "ContainerDefinitions"], [idx]),
"searchLine": common_lib.build_search_line(["Resources", name, "Properties", "ContainerDefinitions"], [idx, "Name","Ref" ]),
}
}
Original file line number Diff line number Diff line change
Expand Up @@ -3,10 +3,10 @@
"fileName": "positive1.yaml",
"queryName": "ECS Task Definition HealthCheck Missing",
"severity": "LOW",
"line": 47
"line": 48
},
{
"line": 29,
"line": 55,
"fileName": "positive2.json",
"queryName": "ECS Task Definition HealthCheck Missing",
"severity": "LOW"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,9 @@ CxPolicy[result] {
}

checkMemory(taskDef, memory) == true
searchkey := createSearchKey(name2, taskDef.Properties.ContainerDefinitions[_])

getkey := cf_lib.createSearchKey(taskDef.Properties.ContainerDefinitions[_])
searchkey = sprintf("Resources.%s.Properties.ContainerDefinitions.Name%s", [name2, getkey])

result := {
"documentId": input.document[i].id,
Expand All @@ -41,7 +43,8 @@ CxPolicy[result] {
cpuMem := {256, 512, 1024, 2048, 4096}
cpu := taskDef.Properties.ContainerDefinitions[_].Cpu
not commonLib.inArray(cpuMem, cpu)
searchkey := createSearchKey(name2, taskDef.Properties.ContainerDefinitions[_])
getkey := cf_lib.createSearchKey(taskDef.Properties.ContainerDefinitions[_])
searchkey := sprintf("Resources.%s.Properties.ContainerDefinitions.Name%s", [name2, getkey])

result := {
"documentId": input.document[i].id,
Expand Down Expand Up @@ -75,12 +78,4 @@ checkRemainder(mem, cpu) {
not mem % 1024 == 0
}

createSearchKey(a, b) = search {
not b.Name.Ref
search := sprintf("Resources.%s.Properties.ContainerDefinitions.Name=%s", [a, b.Name])
}

createSearchKey(a, b) = search {
b.Name.Ref
search := sprintf("Resources.%s.Properties.ContainerDefinitions.Name.Ref=%s", [a, b.Name.Ref])
}
Loading
Loading