iac

Description

we have NPM7 generated package-lock.json with lockFileVersion = 2. Now when we scan Node.js project using Trivy filesystem scan, Trivy does not find out packages from package-lock.json.
It is working with lockFileVersion = 1

What did you expect to happen?

It should find out packages in package-lock.json

What happened instead?

It did not find out packages from pack

• terrascan version: 1.9.0
• terraform version: 1.0.1

Enhancement Request

Other security scanning tools (e.g. checkov and tfsec) have a --soft-fail flag or equivalent option that allows you to always exit with 0 status.

Extremely useful when running the tool without halting a pipeline for example.

I currently use a workaround, but something more concrete would be very desira

Description

We all have an aws_api_gateway_account resource inside each region of AWS that will by default output as unmanaged. We s

Add error handling during credentials onChange event so that the Scan Account feature does not activate if credentials are invalid

$ terratag -tags=var.default_tags
2020/09/24 23:09:46 Processing file cluster/ecs.tf
panic: invalid character 'v' looking for beginning of value

Because having to type the whole commands is a pain!

We avoid automation that changes the source tree without human feedback but this seems to be the model that yor currently uses (e.g. the GitHub action that adds tags to all the things and then commits them to the branch).

In our workflow (we do this with terraform fmt and black for python) we expect the branch as it is committed/pushed by the user to be correct and we have tests that run to

We should add support for other types of virtual networks like:

• Routed
• Open
• Isolated

In my ubuntu 20.04.2.0, i have python 2.7.18 and pip3 20.0.2.
I was trying to install prancer-basic via pip3 install prancer-basic
It get installed successfully with below warning:

WARNING: The scripts populate_json, prancer, register_key_in_azure_vault, terraform_to_json and validator are installed in '/home/r4redu/.local/bin' which is not on PATH.
  Consider adding this director

Description

Add module(s) for creating and configuring data disk for Compute VM(s).

Use of Microsoft.Compute/disks resource.