gitea-mirror/trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2025-12-05 20:40:16 -08:00
Code Issues Packages Projects Releases Wiki Activity

feat(misconf): support https_traffic_only_enabled in Az storage account (#9784)

Browse Source 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
This commit is contained in:
Nikita Pivkin
2025-11-19 08:03:10 +06:00
committed by GitHub
parent 9da33b5aed
commit c8d5ab7690
2 changed files with 14 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
pkg/iac/adapters/terraform/azure/storage/adapt.go
View File

@@ -176,8 +176,10 @@ func adaptAccount(resource *terraform.Block) storage.Account {
account.NetworkRules = append(account.NetworkRules, adaptNetworkRule(networkBlock))
}
httpsOnlyAttr := resource.GetAttribute("enable_https_traffic_only")
account.EnforceHTTPS = httpsOnlyAttr.AsBoolValueOrDefault(true, resource)
account.EnforceHTTPS = resource.GetFirstAttributeOf(
"enable_https_traffic_only",
"https_traffic_only_enabled", // provider above version 4
).AsBoolValueOrDefault(true, resource)
// Adapt blob properties
blobPropertiesBlock := resource.GetBlock("blob_properties")

12
pkg/iac/terraform/block.go
View File

@@ -16,6 +16,7 @@ import (
"github.com/aquasecurity/trivy/pkg/iac/terraform/context"
iacTypes "github.com/aquasecurity/trivy/pkg/iac/types"
"github.com/aquasecurity/trivy/pkg/set"
)
type Block struct {
@@ -303,11 +304,18 @@ func (b *Block) GetAttributes() []*Attribute {
}
func (b *Block) GetAttribute(name string) *Attribute {
if b == nil || b.hclBlock == nil {
return b.GetFirstAttributeOf(name)
}
func (b *Block) GetFirstAttributeOf(names ...string) *Attribute {
if b == nil || b.hclBlock == nil || len(names) == 0 {
return nil
}
nameSet := set.New(names...)
for _, attr := range b.attributes {
if attr.Name() == name {
if ok := nameSet.Contains(attr.Name()); ok {
return attr
}
}