ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-10 06:45:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(ecr): check if ECR Repository Policies does not exist (#3451)

Browse Source
This commit is contained in:
Sergio Garcia
2024-02-27 17:16:44 +01:00
committed by GitHub
parent f69f008dab
commit 6d44eea11c
1 changed files with 14 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
prowler/providers/aws/services/ecr/ecr_service.py
View File

@@ -70,11 +70,20 @@ class ECR(AWSService):
if regional_client.region in self.registries: if regional_client.region in self.registries:
for repository in self.registries[regional_client.region].repositories: for repository in self.registries[regional_client.region].repositories:
client = self.regional_clients[repository.region] client = self.regional_clients[repository.region]
policy = client.get_repository_policy( try:
repositoryName=repository.name policy = client.get_repository_policy(
) repositoryName=repository.name
if "policyText" in policy: )
repository.policy = loads(policy["policyText"]) if "policyText" in policy:
repository.policy = loads(policy["policyText"])
except ClientError as error:
if (
error.response["Error"]["Code"]
== "RepositoryPolicyNotFoundException"
):
logger.warning(
f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
)
except Exception as error: except Exception as error:
if "RepositoryPolicyNotFoundException" not in str(error): if "RepositoryPolicyNotFoundException" not in str(error):