gitea-mirror/trivy
1
0
Fork 0
mirror of https://github.com/aquasecurity/trivy.git synced 2025-12-21 23:00:42 -08:00
Code Issues Packages Projects Releases Wiki Activity

fix(misconf): properly resolve local Terraform cache (#7983)

Browse Source 
Signed-off-by: nikpivkin <nikita.pivkin@smartforce.io>
Co-authored-by: simar7 <1254783+simar7@users.noreply.github.com>
This commit is contained in:
Nikita Pivkin
2024-11-26 04:18:39 +06:00
committed by GitHub
parent 44c7fdd7a3
commit fe3a8971b6
3 changed files with 62 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

55
pkg/iac/scanners/terraform/parser/parser_test.go
View File

@@ -2010,6 +2010,61 @@ variable "baz" {}
assert.Contains(t, buf.String(), "variables=\"foo\"")
}
func TestLoadChildModulesFromLocalCache(t *testing.T) {
var buf bytes.Buffer
slog.SetDefault(slog.New(log.NewHandler(&buf, &log.Options{Level: log.LevelDebug})))
fsys := fstest.MapFS{
"main.tf": &fstest.MapFile{Data: []byte(`module "level_1" {
source = "./modules/level_1"
}`)},
"modules/level_1/main.tf": &fstest.MapFile{Data: []byte(`module "level_2" {
source = "../level_2"
}`)},
"modules/level_2/main.tf": &fstest.MapFile{Data: []byte(`module "level_3" {
count = 2
source = "../level_3"
}`)},
"modules/level_3/main.tf": &fstest.MapFile{Data: []byte(`resource "foo" "bar" {}`)},
".terraform/modules/modules.json": &fstest.MapFile{Data: []byte(`{
"Modules": [
{ "Key": "", "Source": "", "Dir": "." },
{
"Key": "level_1",
"Source": "./modules/level_1",
"Dir": "modules/level_1"
},
{
"Key": "level_1.level_2",
"Source": "../level_2",
"Dir": "modules/level_2"
},
{
"Key": "level_1.level_2.level_3",
"Source": "../level_3",
"Dir": "modules/level_3"
}
]
}`)},
}
parser := New(
fsys, "",
OptionStopOnHCLError(true),
)
require.NoError(t, parser.ParseFS(context.TODO(), "."))
modules, _, err := parser.EvaluateAll(context.TODO())
require.NoError(t, err)
assert.Len(t, modules, 5)
assert.Contains(t, buf.String(), "Using module from Terraform cache .terraform/modules\tsource=\"./modules/level_1\"")
assert.Contains(t, buf.String(), "Using module from Terraform cache .terraform/modules\tsource=\"../level_2\"")
assert.Contains(t, buf.String(), "Using module from Terraform cache .terraform/modules\tsource=\"../level_3\"")
assert.Contains(t, buf.String(), "Using module from Terraform cache .terraform/modules\tsource=\"../level_3\"")
}
func TestLogParseErrors(t *testing.T) {
var buf bytes.Buffer
slog.SetDefault(slog.New(log.NewHandler(&buf, nil)))