From e2861614c273d0d9657199c25e5cbf9bb598c627 Mon Sep 17 00:00:00 2001 From: Toni de la Fuente Date: Wed, 14 Nov 2018 22:30:22 -0500 Subject: [PATCH] Generate creds report only if group1 related --- prowler | 21 ++++++++++++++------- 1 file changed, 14 insertions(+), 7 deletions(-) diff --git a/prowler b/prowler index b243b681..903a4d45 100755 --- a/prowler +++ b/prowler @@ -197,8 +197,15 @@ execute_check() { # for example, we might have been passed 1.01 which is another name for 1.1 local alternate_name_var=CHECK_ALTERNATE_$1 local alternate_name=${!alternate_name_var} - + # Generate the credential report, only if it is group1 related which checks we + # run so that the checks can safely assume it's available if [ ${alternate_name} ];then + if [[ ${alternate_name} == check1* ]];then + if [ ! -s $TEMP_REPORT_FILE ];then + genCredReport + saveReport + fi + fi show_check_title ${alternate_name} ${alternate_name} else @@ -206,6 +213,12 @@ execute_check() { local check_id_var=CHECK_ID_$1 local check_id=${!check_id_var} if [ ${check_id} ]; then + if [[ ${check_id} == 1* ]];then + if [ ! -s $TEMP_REPORT_FILE ];then + genCredReport + saveReport + fi + fi show_check_title $1 $1 else @@ -290,11 +303,6 @@ fi # Gather account data / test aws cli connectivity getWhoami -# Generate the credential report, regardless of which checks we run -# so that the checks can safely assume it's available -genCredReport -saveReport - # Execute single check if called with -c if [[ $CHECK_ID ]];then execute_check $CHECK_ID @@ -319,6 +327,5 @@ if [[ $GROUP_ID_READ ]];then fi execute_all - cleanTemp exit $EXITCODE