Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add first csp rule template #3081

Merged
merged 5 commits into from
Apr 20, 2022
Merged

Conversation

CohenIdo
Copy link
Contributor

@CohenIdo CohenIdo commented Apr 13, 2022

First CSP rule template, working with the following Kibanaa PR:

@CohenIdo CohenIdo requested a review from a team as a code owner April 13, 2022 08:24
@oren-zohar
Copy link
Contributor

@CohenIdo can you please give some context?

@elasticmachine
Copy link

elasticmachine commented Apr 13, 2022

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS
Pipeline View Test View Changes Artifacts preview preview

Expand to view the summary

Build stats

  • Start Time: 2022-04-20T07:51:08.931+0000

  • Duration: 13 min 34 sec

Test stats 🧪

Test Results
Failed 0
Passed 1
Skipped 0
Total 1

🤖 GitHub comments

To re-run your PR in the CI, just comment with:

  • /test : Re-trigger the build.

@CohenIdo CohenIdo marked this pull request as draft April 13, 2022 09:22
@CohenIdo
Copy link
Contributor Author

@oren-zohar it's still a draft, sorry about the confusion

Copy link
Contributor

@kfirpeled kfirpeled left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm as a starting point

@eyalkraft
Copy link
Contributor

seems like the CI problem is that the filename of the rule template doesn't match the id of the rule template

"muted": false,
"rego_rule_id": "cis_1_2_2"
},
"id": "csp_rule_template-41308bcdaaf665761478bb6f0d745a5c",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
"id": "csp_rule_template-41308bcdaaf665761478bb6f0d745a5c",
"id": "csp_rule_template-9129a080-7f48-11ec41308bcdaaf665761478bb6f0d745a5c",

or rename the file to

packages/cis_kubernetes_benchmark/kibana/csp_rule_template/csp_rule_template-41308bcdaaf665761478bb6f0d745a5c.json

@eyalkraft
Copy link
Contributor

Also the PR name is Add 2 rule assets but there's only one 😄

@CohenIdo CohenIdo changed the title add 2 rules assets add first csp rule template Apr 20, 2022
@CohenIdo CohenIdo merged commit 11e01a0 into elastic:main Apr 20, 2022
v1v added a commit to v1v/integrations that referenced this pull request Apr 25, 2022
…ations into feature/labels-cloud-ephemeral-components

* 'feature/labels-cloud-ephemeral-components' of github.com:v1v/integrations: (23 commits)
  use branch
  standardise labels/tags
  Update .ci/Jenkinsfile
  [ci][terraform][aws] tags with metadata
  Bump github.com/elastic/elastic-package from 0.46.0 to 0.47.0 (elastic#3182)
  Spring boot package [Memory - data stream] (elastic#2979)
  [cisco_ise] Add Cisco ISE package (elastic#2855)
  [apache_spark][executor] Add Apache Spark package with Executor data stream (elastic#2943)
  [apache_spark][driver] Add Apache Spark package with Driver data stream (elastic#2945)
  cisco_duo: simplify grok expression for handling ports (elastic#3170)
  cisco_duo: fix handling of IP addresses with port numbers (elastic#3117)
  [sophos] Various improvements and log samples from 18.5 (elastic#3127)
  [cisco_asa] fix visualizations (elastic#3146)
  [apache_spark][application] Add Apache Spark package with Application data stream (elastic#2941)
  Fix pagination bug that skipped events when more than one page is present. (elastic#3140)
  Cis k8s name migration (elastic#3113)
  remove exported fields; these will be added to Kibana docs instead (elastic#3093)
  Exclude ecosystem as owner of subdirectories of packages (elastic#3132)
  [awsfargate] bump package version (elastic#3130)
  add first csp rule template (elastic#3081)
  ...
@kfirpeled kfirpeled added the Team:Cloud Security Label for the Cloud Security team [elastic/cloud-security-posture] label Jun 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Team:Cloud Security Label for the Cloud Security team [elastic/cloud-security-posture]
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants