Skip to content
#

compliance

Here are 310 public repositories matching this topic...

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

  • Updated Jan 22, 2021
  • Shell

Prowler is a security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains all CIS controls listed here https://d0.awsstatic.com/whitepapers/compliance/AWS_CIS_Foundations_Benchmark.pdf and more than 100 additional checks that help on GDPR, HIPAA and other security requirements.

  • Updated Feb 9, 2021
  • Shell
tfsec
krathow
krathow commented Dec 9, 2020

Describe the bug
CKV_GCP_14 requires a backup configuration, but it does not take into consideration read replicas.
A read replica cannot have backup enabled in GCP.

To Reproduce
Steps to reproduce the behavior:

  1. Create a google_sql_database_instance with master_instance_name and replica_configuration
  2. Chekov will pop up error CKV_GCP_14

Expected behavior
Read replicas

panther
tatehanawalt
tatehanawalt commented Jan 14, 2021

Overview:

Developers may run mage commands against multiple different versions of panther.

The mage logs do not specify the version of panther.

If we have the git commit we can be sure of the command context.

Example:

Specifically I am running integration tests for release testing. I pulled the repo and achieved successful integration test results. Pull resulted in updates to

cfripper
IgnacioRV
IgnacioRV commented Feb 7, 2020

Description

Currently add_failure takes the values required to create a failure, creates it then adds it to the Result object's failed_rules
On the other hand add_warning takes a Failure object directly.

Proposed solution

The methods should be updated so that they both have the same behavior (or maybe even just add an add_finding method which takes a type that can be either Failure o

Improve this page

Add a description, image, and links to the compliance topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the compliance topic, visit your repo's landing page and select "manage topics."

Learn more