diff --git a/pkg/report/table/misconfig.go b/pkg/report/table/misconfig.go index 112d783d0875..fa2f4db4fdbf 100644 --- a/pkg/report/table/misconfig.go +++ b/pkg/report/table/misconfig.go @@ -124,6 +124,9 @@ func (r *misconfigRenderer) renderSummary(misconf types.DetectedMisconfiguration } } + // ID + r.printf("%s\r\n", misconf.ID) + // severity switch misconf.Severity { case severityCritical: diff --git a/pkg/report/table/misconfig_test.go b/pkg/report/table/misconfig_test.go index a57399f0e253..5e22549de744 100644 --- a/pkg/report/table/misconfig_test.go +++ b/pkg/report/table/misconfig_test.go @@ -44,6 +44,7 @@ my-file () Tests: 1 (SUCCESSES: 0, FAILURES: 1, EXCEPTIONS: 0) Failures: 1 (LOW: 0, MEDIUM: 0, HIGH: 1, CRITICAL: 0) +AVD-XYZ-0123 HIGH: Oh no, a bad config. ════════════════════════════════════════ Your config file is not good. @@ -103,6 +104,7 @@ my-file () Tests: 1 (SUCCESSES: 0, FAILURES: 1, EXCEPTIONS: 0) Failures: 1 (LOW: 0, MEDIUM: 0, HIGH: 1, CRITICAL: 0) +AVD-XYZ-0123 HIGH: Oh no, a bad config. ════════════════════════════════════════ Your config file is not good. @@ -174,7 +176,8 @@ my-file () Tests: 2 (SUCCESSES: 1, FAILURES: 1, EXCEPTIONS: 0) Failures: 1 (LOW: 0, MEDIUM: 0, HIGH: 1, CRITICAL: 0) -FAIL: HIGH: Oh no, a bad config. +FAIL: AVD-XYZ-0123 +HIGH: Oh no, a bad config. ════════════════════════════════════════ Your config file is not good. @@ -188,7 +191,8 @@ See https://google.com/search?q=bad%20config ──────────────────────────────────────── -PASS: MEDIUM: Oh no, a bad config AGAIN. +PASS: AVD-XYZ-0456 +MEDIUM: Oh no, a bad config AGAIN. ════════════════════════════════════════ Your config file is still not good. @@ -312,6 +316,7 @@ terraform-aws-modules/security-group/aws/main.tf (terraform) Tests: 6 (SUCCESSES: 5, FAILURES: 1, EXCEPTIONS: 0) Failures: 1 (LOW: 0, MEDIUM: 0, HIGH: 0, CRITICAL: 1) +AVD-AWS-0107 CRITICAL: Security group rule allows ingress from public internet. ════════════════════════════════════════ Opening up ports to the public internet is generally to be avoided. You should restrict access to IP addresses or ranges that explicitly require it where possible.