mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 23:05:05 +00:00
Ignore inline whitelist comments, pass checkid to filter ignores specifically for checks
This commit is contained in:
@@ -107,7 +107,12 @@ textFail(){
|
||||
## ignore whitelists for current check
|
||||
level="FAIL"
|
||||
for i in $IGNORES; do
|
||||
ignore_check_name="${i%:*}"
|
||||
ignore_value="${i#*${CHECK_NAME}:}"
|
||||
if [[ ${ignore_check_name} != "${CHECK_NAME}" ]]; then
|
||||
# not for this check
|
||||
continue
|
||||
fi
|
||||
if [[ $1 =~ ${ignore_value} ]]; then
|
||||
level="WARNING"
|
||||
break
|
||||
|
||||
5
prowler
5
prowler
@@ -218,7 +218,8 @@ REGIONS=$($AWSCLI ec2 describe-regions --query 'Regions[].RegionName' \
|
||||
# Pre-process whitelist file if supplied
|
||||
if [[ -n "$WHITELIST_FILE" ]]; then
|
||||
# ignore lines starting with # (comments)
|
||||
WHITELIST=$(awk '!/^[[:space:]]*#/{print }' <(cat "$WHITELIST_FILE"))
|
||||
# ignore inline comments: check1:foo # inline comment
|
||||
WHITELIST=$(awk '!/^[[:space:]]*#/{print }' <(cat "$WHITELIST_FILE") | sed 's/[[:space:]]*#.*$//g')
|
||||
fi
|
||||
|
||||
# Load all of the groups of checks inside groups folder named as "groupNumber*"
|
||||
@@ -288,7 +289,7 @@ execute_check() {
|
||||
show_check_title "$1"
|
||||
ignores=$(awk '/${1}/{print}' <(echo "${WHITELIST}"))
|
||||
# set the custom ignores list for this check
|
||||
IGNORES="${ignores}" $1
|
||||
IGNORES="${ignores}" CHECK_NAME="$1" $1
|
||||
else
|
||||
textFail "ERROR! Use a valid check name (i.e. check41 or extra71)";
|
||||
exit $EXITCODE
|
||||
|
||||
Reference in New Issue
Block a user