Merge pull request Checkmarx#7171 from Checkmarx/AST-45283-pulumi

update(query): add CWE infos to Pulumi queries
liorj-orca · Sep 19, 2024 · 35a4aa0 · 35a4aa0
2 parents 5a7d18d + d3f0a20
commit 35a4aa0
Show file tree

Hide file tree

Showing 21 changed files with 22 additions and 21 deletions.
diff --git a/...s/queries/pulumi/aws/amazon_dms_replication_instance_is_publicly_accessible/metadata.json b/...s/queries/pulumi/aws/amazon_dms_replication_instance_is_publicly_accessible/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Pulumi",
   "descriptionID": "fdd6a212",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "284",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/pulumi/aws/api_gateway_access_logging_disabled/metadata.json b/assets/queries/pulumi/aws/api_gateway_access_logging_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Pulumi",
   "descriptionID": "5feb747f",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "778"
 }
diff --git a/assets/queries/pulumi/aws/api_gateway_without_ssl_certificate/metadata.json b/assets/queries/pulumi/aws/api_gateway_without_ssl_certificate/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Pulumi",
   "descriptionID": "f7ced1f3",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "295"
 }
diff --git a/assets/queries/pulumi/aws/docdb_logging_disabled/metadata.json b/assets/queries/pulumi/aws/docdb_logging_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Pulumi",
   "descriptionID": "c5bd58cd",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "778",
   "oldSeverity": "LOW"
 }
diff --git a/assets/queries/pulumi/aws/dynamodb_table_not_encrypted/metadata.json b/assets/queries/pulumi/aws/dynamodb_table_not_encrypted/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Pulumi",
   "descriptionID": "fb6a0c51",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "311",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/pulumi/aws/dynamodb_table_point_in_time_recovery_disabled/metadata.json b/assets/queries/pulumi/aws/dynamodb_table_point_in_time_recovery_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Pulumi",
   "descriptionID": "6ff56c6e",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "459",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/pulumi/aws/ec2_instance_monitoring_disabled/metadata.json b/assets/queries/pulumi/aws/ec2_instance_monitoring_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Pulumi",
   "descriptionID": "7f96d3ac",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "778",
   "oldSeverity": "INFO"
 }
diff --git a/assets/queries/pulumi/aws/ec2_not_ebs_optimized/metadata.json b/assets/queries/pulumi/aws/ec2_not_ebs_optimized/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Pulumi",
   "descriptionID": "81a001dd",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "459"
 }
diff --git a/assets/queries/pulumi/aws/ecs_cluster_container_insights_disabled/metadata.json b/assets/queries/pulumi/aws/ecs_cluster_container_insights_disabled/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://www.pulumi.com/registry/packages/aws/api-docs/ecs/cluster/#settings_yaml",
   "platform": "Pulumi",
   "descriptionID": "6fd99865",
-  "cloudProvider": "aws"
+  "cloudProvider": "aws",
+  "cwe": "778"
 }
diff --git a/assets/queries/pulumi/aws/elasticache_nodes_not_created_across_multi_az/metadata.json b/assets/queries/pulumi/aws/elasticache_nodes_not_created_across_multi_az/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Pulumi",
   "descriptionID": "149de780",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "284"
 }
diff --git a/assets/queries/pulumi/aws/elasticache_redis_cluster_without_backup/metadata.json b/assets/queries/pulumi/aws/elasticache_redis_cluster_without_backup/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Pulumi",
   "descriptionID": "ff8bf6c0",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "459"
 }
diff --git a/assets/queries/pulumi/aws/elasticsearch_logs_disabled/metadata.json b/assets/queries/pulumi/aws/elasticsearch_logs_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Pulumi",
   "descriptionID": "55b7425d",
   "cloudProvider": "aws",
-  "cwe": ""
+  "cwe": "778"
 }
diff --git a/assets/queries/pulumi/aws/elasticsearch_with_https_disabled/metadata.json b/assets/queries/pulumi/aws/elasticsearch_with_https_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Pulumi",
   "descriptionID": "831d28f3",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "311",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/pulumi/aws/iam_password_without_minimum_length/metadata.json b/assets/queries/pulumi/aws/iam_password_without_minimum_length/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Pulumi",
   "descriptionID": "5e46720a",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "521",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/pulumi/aws/rds_db_instance_publicly_accessible/metadata.json b/assets/queries/pulumi/aws/rds_db_instance_publicly_accessible/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Pulumi",
   "descriptionID": "be6d13f0",
   "cloudProvider": "aws",
-  "cwe": "",
+  "cwe": "284",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/pulumi/azure/redis_cache_allows_non_ssl_connections/metadata.json b/assets/queries/pulumi/azure/redis_cache_allows_non_ssl_connections/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Pulumi",
   "descriptionID": "64acf7a6",
   "cloudProvider": "azure",
-  "cwe": ""
+  "cwe": "284"
 }
diff --git a/assets/queries/pulumi/azure/storage_account_not_forcing_https/metadata.json b/assets/queries/pulumi/azure/storage_account_not_forcing_https/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Pulumi",
   "descriptionID": "406540e1",
   "cloudProvider": "azure",
-  "cwe": "",
+  "cwe": "319",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/pulumi/gcp/cloud_storage_bucket_logging_not_enabled/metadata.json b/assets/queries/pulumi/gcp/cloud_storage_bucket_logging_not_enabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "Pulumi",
   "descriptionID": "cc15c4d8",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "778",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/pulumi/gcp/google_compute_ssl_policy_weak_cipher_in_use/metadata.json b/assets/queries/pulumi/gcp/google_compute_ssl_policy_weak_cipher_in_use/metadata.json
@@ -8,5 +8,5 @@
   "platform": "Pulumi",
   "descriptionID": "58a27cbf",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "326"
 }
diff --git a/assets/queries/pulumi/kubernetes/missing_app_armor_config/metadata.json b/assets/queries/pulumi/kubernetes/missing_app_armor_config/metadata.json
@@ -7,7 +7,7 @@
   "descriptionUrl": "https://www.pulumi.com/registry/packages/kubernetes/api-docs/core/v1/pod/#objectmeta",
   "platform": "Pulumi",
   "descriptionID": "15676623",
-  "cwe": "",
+  "cwe": "284",
   "cloudProvider": "common",
   "oldSeverity": "LOW"
 }
diff --git a/assets/queries/pulumi/kubernetes/psp_set_to_privileged/metadata.json b/assets/queries/pulumi/kubernetes/psp_set_to_privileged/metadata.json
@@ -7,7 +7,7 @@
   "descriptionUrl": "https://www.pulumi.com/registry/packages/kubernetes/api-docs/policy/v1beta1/podsecuritypolicy/#privileged_yaml",
   "platform": "Pulumi",
   "descriptionID": "7a6c8b70",
-  "cwe": "",
+  "cwe": "269",
   "cloudProvider": "common",
   "oldSeverity": "MEDIUM"
 }