Modify S2612: add Ansible #4356
Conversation
sebastien-andrivet-sonarsource
changed the title
sebastien-andrivet-sonarsource
force-pushed
the
andrivet/S2612-ansible
branch
from
aab3d56 to
98a47ca
Compare
There was a problem hiding this comment.
Please have a look at the discussion in https://sonarsource.atlassian.net/browse/APPSEC-2157?focusedCommentId=670196 and, if needed, remove the code example where the mode argument is omitted.
rules/S2612/ansible/rule.adoc
Outdated
| - name: Copy demo3.conf without setting permissions (default permissions) | ||
| ansible.builtin.copy: | ||
| src: /files/demo.conf | ||
| dest: /etc/demo/demo.conf |
There was a problem hiding this comment.
I made a comment in https://sonarsource.atlassian.net/browse/APPSEC-2157 to discuss if we should raise in the absence or the mode argument.
There was a problem hiding this comment.
We should not.
|
|
|
Validation of links are failing but non are in the "see" section of S2612 |
Review
A dedicated reviewer checked the rule description successfully for: