chore: Update hermit and pre-commit packages

Made with ❤️️ by updatecli
elastic · Dec 23, 2024 · 6409871 · 6409871
1 parent de93505
commit 6409871
Show file tree

Hide file tree

Showing 108 changed files with 220 additions and 220 deletions.
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -77,7 +77,7 @@ repos:
         files: deploy/cloudformation/.*yml
 
   - repo: https://github.com/aws-cloudformation/cfn-lint
-    rev: v1.22.1
+    rev: v1.22.2
     hooks:
       - id: cfn-python-lint
         files: deploy/cloudformation/.*.yml

diff --git a/bin/.aws-iam-authenticator-0.6.28.pkg → bin/.aws-iam-authenticator-0.6.29.pkg b/bin/.aws-iam-authenticator-0.6.28.pkg → bin/.aws-iam-authenticator-0.6.29.pkg
diff --git a/bin/.awscli-2.22.17.pkg → bin/.awscli-2.22.22.pkg b/bin/.awscli-2.22.17.pkg → bin/.awscli-2.22.22.pkg
diff --git a/bin/.elastic-package-0.107.2.pkg → bin/.elastic-package-0.108.0.pkg b/bin/.elastic-package-0.107.2.pkg → bin/.elastic-package-0.108.0.pkg
diff --git a/bin/.gcloud-503.0.0.pkg → bin/.gcloud-504.0.1.pkg b/bin/.gcloud-503.0.0.pkg → bin/.gcloud-504.0.1.pkg
diff --git a/bin/.gh-2.63.2.pkg → bin/.gh-2.64.0.pkg b/bin/.gh-2.63.2.pkg → bin/.gh-2.64.0.pkg
diff --git a/bin/.kind-0.25.0.pkg → bin/.kind-0.26.0.pkg b/bin/.kind-0.25.0.pkg → bin/.kind-0.26.0.pkg
diff --git a/bin/.opa-0.70.0.pkg → bin/.opa-1.0.0.pkg b/bin/.opa-0.70.0.pkg → bin/.opa-1.0.0.pkg
diff --git a/bin/aws b/bin/aws
@@ -1 +1 @@
-.awscli-2.22.17.pkg
+.awscli-2.22.22.pkg
diff --git a/bin/aws-iam-authenticator b/bin/aws-iam-authenticator
@@ -1 +1 @@
-.aws-iam-authenticator-0.6.28.pkg
+.aws-iam-authenticator-0.6.29.pkg
diff --git a/bin/aws_completer b/bin/aws_completer
@@ -1 +1 @@
-.awscli-2.22.17.pkg
+.awscli-2.22.22.pkg
diff --git a/bin/bq b/bin/bq
@@ -1 +1 @@
-.gcloud-503.0.0.pkg
+.gcloud-504.0.1.pkg
diff --git a/bin/docker-credential-gcloud b/bin/docker-credential-gcloud
@@ -1 +1 @@
-.gcloud-503.0.0.pkg
+.gcloud-504.0.1.pkg
diff --git a/bin/elastic-package b/bin/elastic-package
@@ -1 +1 @@
-.elastic-package-0.107.2.pkg
+.elastic-package-0.108.0.pkg
diff --git a/bin/gcloud b/bin/gcloud
@@ -1 +1 @@
-.gcloud-503.0.0.pkg
+.gcloud-504.0.1.pkg
diff --git a/bin/gh b/bin/gh
@@ -1 +1 @@
-.gh-2.63.2.pkg
+.gh-2.64.0.pkg
diff --git a/bin/git-credential-gcloud.sh b/bin/git-credential-gcloud.sh
@@ -1 +1 @@
-.gcloud-503.0.0.pkg
+.gcloud-504.0.1.pkg
diff --git a/bin/gsutil b/bin/gsutil
@@ -1 +1 @@
-.gcloud-503.0.0.pkg
+.gcloud-504.0.1.pkg
diff --git a/bin/kind b/bin/kind
@@ -1 +1 @@
-.kind-0.25.0.pkg
+.kind-0.26.0.pkg
diff --git a/bin/opa b/bin/opa
@@ -1 +1 @@
-.opa-0.70.0.pkg
+.opa-1.0.0.pkg
diff --git a/security-policies/bundle/compliance/cis_aws/rules/cis_1_15/test.rego b/security-policies/bundle/compliance/cis_aws/rules/cis_1_15/test.rego
@@ -19,7 +19,7 @@ test_not_evaluated if {
 	not_eval with input as test_data.not_evaluated_iam_user
 }
 
-rule_input(inline_policies, attached_policies) = test_data.generate_iam_user_with_policies(inline_policies, attached_policies)
+rule_input(inline_policies, attached_policies) := test_data.generate_iam_user_with_policies(inline_policies, attached_policies)
 
 eval_fail if {
 	test.assert_fail(finding) with data.benchmark_data_adapter as data_adapter

diff --git a/security-policies/bundle/compliance/cis_aws/rules/cis_1_7/rule.rego b/security-policies/bundle/compliance/cis_aws/rules/cis_1_7/rule.rego
@@ -7,7 +7,7 @@ import future.keywords.if
 
 # Eliminate use of the 'root' user for administrative and daily tasks
 # daily interpret as a day (24h)
-finding = result if {
+finding := result if {
 	# filter
 	data_adapter.is_root_user
 

diff --git a/security-policies/bundle/compliance/cis_aws/rules/cis_2_3_2/rule.rego b/security-policies/bundle/compliance/cis_aws/rules/cis_2_3_2/rule.rego
@@ -4,7 +4,7 @@ import data.compliance.lib.common as lib_common
 import data.compliance.policy.aws_rds.data_adapter
 import future.keywords.if
 
-finding = result if {
+finding := result if {
 	data_adapter.is_rds
 
 	result := lib_common.generate_result_without_expected(

diff --git a/security-policies/bundle/compliance/cis_aws/rules/cis_2_3_3/test.rego b/security-policies/bundle/compliance/cis_aws/rules/cis_2_3_3/test.rego
@@ -37,7 +37,7 @@ test_not_evaluated if {
 	not_eval with input as rule_input(true, [test_data.generate_rds_db_instance_subnet_with_route("0.0.0.0/0", "igw-12345678"), {"ID": "subnet-abcdef12", "RouteTable": null}])
 }
 
-rule_input(publicly_accessible, subnets) = test_data.generate_rds_db_instance(true, true, publicly_accessible, subnets)
+rule_input(publicly_accessible, subnets) := test_data.generate_rds_db_instance(true, true, publicly_accessible, subnets)
 
 eval_fail if {
 	test.assert_fail(finding) with data.benchmark_data_adapter as data_adapter

diff --git a/security-policies/bundle/compliance/cis_aws/rules/cis_3_1/rule.rego b/security-policies/bundle/compliance/cis_aws/rules/cis_3_1/rule.rego
@@ -5,9 +5,9 @@ import data.compliance.policy.aws_cloudtrail.data_adapter
 import data.compliance.policy.aws_cloudtrail.trail
 import future.keywords.if
 
-default rule_evaluation = false
+default rule_evaluation := false
 
-finding = result if {
+finding := result if {
 	# filter
 	data_adapter.is_multi_trails_type
 

diff --git a/security-policies/bundle/compliance/cis_aws/rules/cis_3_7/rule.rego b/security-policies/bundle/compliance/cis_aws/rules/cis_3_7/rule.rego
@@ -4,10 +4,10 @@ import data.compliance.lib.common
 import data.compliance.policy.aws_cloudtrail.data_adapter
 import future.keywords.if
 
-default rule_evaluation = false
+default rule_evaluation := false
 
 # Ensure CloudTrail logs are encrypted at rest using KMS CMKs.
-finding = result if {
+finding := result if {
 	# filter
 	data_adapter.is_single_trail
 

diff --git a/security-policies/bundle/compliance/cis_aws/rules/cis_3_8/test.rego b/security-policies/bundle/compliance/cis_aws/rules/cis_3_8/test.rego
@@ -6,7 +6,7 @@ import data.compliance.policy.aws_kms.ensure_symmetric_key_rotation_enabled as a
 import data.lib.test
 import future.keywords.if
 
-finding = audit.finding
+finding := audit.finding
 
 test_violation if {
 	eval_fail with input as rule_input(false)
@@ -20,7 +20,7 @@ test_not_evaluated if {
 	not_eval with input as test_data.not_evaluated_trail
 }
 
-rule_input(symmetric_default_enabled) = test_data.generate_kms_resource(symmetric_default_enabled)
+rule_input(symmetric_default_enabled) := test_data.generate_kms_resource(symmetric_default_enabled)
 
 eval_fail if {
 	test.assert_fail(finding) with data.benchmark_data_adapter as data_adapter

diff --git a/security-policies/bundle/compliance/cis_aws/rules/cis_4_12/test.rego b/security-policies/bundle/compliance/cis_aws/rules/cis_4_12/test.rego
@@ -29,7 +29,7 @@ test_pass if {
 	}])
 }
 
-rule_input(entry) = test_data.generate_monitoring_resources(entry)
+rule_input(entry) := test_data.generate_monitoring_resources(entry)
 
 eval_pass if {
 	test.assert_pass(finding) with data.benchmark_data_adapter as data_adapter

diff --git a/security-policies/bundle/compliance/cis_aws/rules/cis_4_2/rule.rego b/security-policies/bundle/compliance/cis_aws/rules/cis_4_2/rule.rego
@@ -6,9 +6,9 @@ import data.compliance.policy.aws_cloudtrail.pattern
 import data.compliance.policy.aws_cloudtrail.trail
 import future.keywords.if
 
-default rule_evaluation = false
+default rule_evaluation := false
 
-finding = result if {
+finding := result if {
 	# filter
 	data_adapter.is_multi_trails_type
 
@@ -19,7 +19,7 @@ finding = result if {
 	)
 }
 
-required_patterns = [
+required_patterns := [
 	# { ($.eventName = \"ConsoleLogin\") && ($.additionalEventData.MFAUsed != \"Yes\") }
 	pattern.complex_expression("&&", [
 		pattern.simple_expression("$.eventName", "=", "\"ConsoleLogin\""),
@@ -34,4 +34,4 @@ required_patterns = [
 	]),
 ]
 
-rule_evaluation = trail.at_least_one_trail_satisfied(required_patterns)
+rule_evaluation := trail.at_least_one_trail_satisfied(required_patterns)
diff --git a/security-policies/bundle/compliance/cis_aws/rules/cis_4_3/test.rego b/security-policies/bundle/compliance/cis_aws/rules/cis_4_3/test.rego
@@ -91,7 +91,7 @@ test_fail if {
 	])
 }
 
-rule_input(entry) = test_data.generate_monitoring_resources(entry)
+rule_input(entry) := test_data.generate_monitoring_resources(entry)
 
 eval_pass if {
 	test.assert_pass(finding) with data.benchmark_data_adapter as data_adapter

diff --git a/security-policies/bundle/compliance/cis_aws/rules/cis_5_4/test.rego b/security-policies/bundle/compliance/cis_aws/rules/cis_5_4/test.rego
@@ -24,7 +24,7 @@ test_not_evaluated if {
 	not_eval with input as rule_input({"GroupName": "custom", "IpPermissionsEgress": [{}]})
 }
 
-rule_input(entry) = test_data.generate_security_group(entry)
+rule_input(entry) := test_data.generate_security_group(entry)
 
 eval_fail if {
 	test.assert_fail(finding) with data.benchmark_data_adapter as data_adapter

diff --git a/security-policies/bundle/compliance/cis_azure/rules/cis_2_1_19/rule.rego b/security-policies/bundle/compliance/cis_azure/rules/cis_2_1_19/rule.rego
@@ -5,7 +5,7 @@ import data.compliance.policy.azure.data_adapter
 import future.keywords.if
 import future.keywords.in
 
-finding = result if {
+finding := result if {
 	# filter
 	data_adapter.is_security_contacts
 
@@ -16,7 +16,7 @@ finding = result if {
 	)
 }
 
-default owner_enabled = false
+default owner_enabled := false
 
 owner_enabled if {
 	# Ensure at least one Security Contact Settings exists and owner is selected.

diff --git a/security-policies/bundle/compliance/cis_azure/rules/cis_3_15/rule.rego b/security-policies/bundle/compliance/cis_azure/rules/cis_3_15/rule.rego
@@ -5,7 +5,7 @@ import data.compliance.policy.azure.data_adapter
 import data.compliance.policy.azure.storage_account.ensure_tls_version as audit
 import future.keywords.if
 
-finding = result if {
+finding := result if {
 	# filter
 	data_adapter.is_storage_account
 

diff --git a/security-policies/bundle/compliance/cis_azure/rules/cis_3_5/rule.rego b/security-policies/bundle/compliance/cis_azure/rules/cis_3_5/rule.rego
@@ -5,7 +5,7 @@ import data.compliance.policy.azure.data_adapter
 import data.compliance.policy.azure.storage_account.ensure_service_log as audit
 import future.keywords.if
 
-finding = result if {
+finding := result if {
 	# filter
 	data_adapter.is_storage_account
 
@@ -16,7 +16,7 @@ finding = result if {
 	)
 }
 
-default logs_are_enabled = false
+default logs_are_enabled := false
 
 logs_are_enabled if {
 	audit.service_diagnostic_settings_log_rwd_enabled(data_adapter.resource.extension.queueDiagnosticSettings)

diff --git a/security-policies/bundle/compliance/cis_azure/rules/cis_3_7/rule.rego b/security-policies/bundle/compliance/cis_azure/rules/cis_3_7/rule.rego
@@ -5,7 +5,7 @@ import data.compliance.policy.azure.data_adapter
 import data.compliance.policy.azure.storage_account.ensure_public_access as audit
 import future.keywords.if
 
-finding = result if {
+finding := result if {
 	# filter
 	data_adapter.is_storage_account
 

diff --git a/security-policies/bundle/compliance/cis_azure/rules/cis_4_3_6/rule.rego b/security-policies/bundle/compliance/cis_azure/rules/cis_4_3_6/rule.rego
@@ -4,7 +4,7 @@ import data.compliance.lib.common
 import data.compliance.policy.azure.data_adapter
 import future.keywords.if
 
-finding = result if {
+finding := result if {
 	# filter
 	data_adapter.is_postgresql_single_server_db
 
@@ -15,7 +15,7 @@ finding = result if {
 	)
 }
 
-default log_retention_long_enough = false
+default log_retention_long_enough := false
 
 log_retention_long_enough if {
 	some i

diff --git a/security-policies/bundle/compliance/cis_azure/rules/cis_5_2_5/rule.rego b/security-policies/bundle/compliance/cis_azure/rules/cis_5_2_5/rule.rego
@@ -5,7 +5,7 @@ import data.compliance.policy.azure.activity_log_alert.activity_log_alert_operat
 import data.compliance.policy.azure.data_adapter
 import future.keywords.if
 
-finding = result if {
+finding := result if {
 	# filter
 	data_adapter.is_activity_log_alerts
 

diff --git a/security-policies/bundle/compliance/cis_azure/rules/cis_5_2_7/test.rego b/security-policies/bundle/compliance/cis_azure/rules/cis_5_2_7/test.rego
@@ -44,13 +44,13 @@ not_eval if {
 
 # test data
 # alert rule that does not match the rule by operation and category
-mismatch_alert = test_data.generate_activity_log_alert("mismatch_opreation", "mismatch_category")
+mismatch_alert := test_data.generate_activity_log_alert("mismatch_opreation", "mismatch_category")
 
 # alert rule that does not match the rule by operation
-mismatch_alert_only_operation = test_data.generate_activity_log_alert("mismatch_opreation", "Administrative")
+mismatch_alert_only_operation := test_data.generate_activity_log_alert("mismatch_opreation", "Administrative")
 
 # alert rule that does not match the rule by category
-mismatch_alert_only_category = test_data.generate_activity_log_alert("Microsoft.Sql/servers/firewallRules/write", "mismatch_category")
+mismatch_alert_only_category := test_data.generate_activity_log_alert("Microsoft.Sql/servers/firewallRules/write", "mismatch_category")
 
 # alert rule that matches the rule
-matching_alert = test_data.generate_activity_log_alert("Microsoft.Sql/servers/firewallRules/write", "Administrative")
+matching_alert := test_data.generate_activity_log_alert("Microsoft.Sql/servers/firewallRules/write", "Administrative")
diff --git a/security-policies/bundle/compliance/cis_azure/rules/cis_6_1/rule.rego b/security-policies/bundle/compliance/cis_azure/rules/cis_6_1/rule.rego
@@ -5,7 +5,7 @@ import data.compliance.policy.azure.data_adapter
 import data.compliance.policy.azure.virtual_machine.network_rules as audit
 import future.keywords.if
 
-finding = result if {
+finding := result if {
 	# filter
 	data_adapter.is_vm
 

diff --git a/security-policies/bundle/compliance/cis_azure/rules/cis_6_2/rule.rego b/security-policies/bundle/compliance/cis_azure/rules/cis_6_2/rule.rego
@@ -5,7 +5,7 @@ import data.compliance.policy.azure.data_adapter
 import data.compliance.policy.azure.virtual_machine.network_rules as audit
 import future.keywords.if
 
-finding = result if {
+finding := result if {
 	# filter
 	data_adapter.is_vm
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		.aws-iam-authenticator-0.6.28.pkg
		.aws-iam-authenticator-0.6.29.pkg
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		.elastic-package-0.107.2.pkg
		.elastic-package-0.108.0.pkg