iac

Description

We have an air gapped environment without direct internet access. All necessary container images are mirrored to or proxied through an OnPrem registry (Artifactory). This registry uses a certificate from a private PKI. The vulnerability DB cannot be downloaded from this internal registry.

What did you expect to happen?

We expected that --insecure ignores the private PKI

• terrascan version: 1.9.0
• terraform version: 1.0.1

Enhancement Request

Other security scanning tools (e.g. checkov and tfsec) have a --soft-fail flag or equivalent option that allows you to always exit with 0 status.

Extremely useful when running the tool without halting a pipeline for example.

I currently use a workaround, but something more concrete would be very desira

Description

Add GCE support for google_project_iam_custom_role (TF)

Sources

• Terraform Resource Documentation
• GCP Resource Documentation

Add error handling during credentials onChange event so that the Scan Account feature does not activate if credentials are invalid

Because having to type the whole commands is a pain!

Is your feature request related to a problem? Please describe.
I wanted to try Yor out for personal projects and found out, that the Terraform provider I use are as it seems not supported to run Yor against it.
For example I have a K3S Cluster at Civo or some development machines at Scaleway.
As it seems DigitalOcean is also not supported - at least I don't receive any errors or recommended

Describe the bug

The latest API version for icrosoft.RecoveryServices/vaults and its child resources such as Microsoft.RecoveryServices/vaults/backupconfig and Microsoft.RecoveryServices/vaults/backupPolicies are outdated. at the moment, the latest API version is 2022-02-01

To reproduce

N/A

Code snippet

https://docs.microsoft.com/en-us/azure/templates/microsoft.re

We should add support for other types of virtual networks like:

• Routed
• Open
• Isolated

In my ubuntu 20.04.2.0, i have python 2.7.18 and pip3 20.0.2.
I was trying to install prancer-basic via pip3 install prancer-basic
It get installed successfully with below warning:

WARNING: The scripts populate_json, prancer, register_key_in_azure_vault, terraform_to_json and validator are installed in '/home/r4redu/.local/bin' which is not on PATH.
  Consider adding this director