ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-10 14:55:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(allowlist): verify if allowlist file exists (#2988)

Browse Source
This commit is contained in:
Sergio Garcia
2023-10-31 12:53:45 +01:00
committed by GitHub
parent 3fd2ae954d
commit a994553c16
2 changed files with 16 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
prowler/lib/check/check.py
View File

@@ -552,9 +552,12 @@ def execute(
)
# Allowlist findings
check_findings = allowlist_findings(
audit_output_options.allowlist_file, audit_info.audited_account, check_findings
)
if audit_output_options.allowlist_file:
check_findings = allowlist_findings(
audit_output_options.allowlist_file,
audit_info.audited_account,
check_findings,
)
# Report the check's findings
report(check_findings, audit_output_options, audit_info)

21
prowler/providers/aws/lib/allowlist/allowlist.py
View File

@@ -121,17 +121,16 @@ def allowlist_findings(
check_findings: [Any],
):
# Check if finding is allowlisted
if allowlist:
for finding in check_findings:
if is_allowlisted(
allowlist,
audited_account,
finding.check_metadata.CheckID,
finding.region,
finding.resource_id,
unroll_tags(finding.resource_tags),
):
finding.status = "WARNING"
for finding in check_findings:
if is_allowlisted(
allowlist,
audited_account,
finding.check_metadata.CheckID,
finding.region,
finding.resource_id,
unroll_tags(finding.resource_tags),
):
finding.status = "WARNING"
return check_findings