Skip to content

Commit

Permalink
Testing config changes
Browse files Browse the repository at this point in the history
  • Loading branch information
Michael Schappacher committed Jun 12, 2019
1 parent ae69862 commit 8225a21
Show file tree
Hide file tree
Showing 4 changed files with 151 additions and 16 deletions.
8 changes: 4 additions & 4 deletions .circleci/config.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ jobs:
- image: circleci/golang:1.11
environment:
- GO111MODULE=on
working_directory: /go/src/github.com/MikeSchapp/config-lint
working_directory: /go/src/github.com/stelligent/config-lint
steps:
- checkout
- restore_cache:
Expand All @@ -16,7 +16,7 @@ jobs:
command: go mod download
- run:
name: Test
command: go test
command: make test
- save_cache:
key: v1-config-lint-cache
paths:
Expand All @@ -27,10 +27,10 @@ jobs:
release:
docker:
- image: circleci/golang:1.11
working_directory: /go/src/github.com/MikeSchapp/config-lint
working_directory: /go/src/github.com/stelligent/config-lint
steps:
- attach_workspace:
at: /go/src/github.com/MikeSchapp/config-lint
at: /go/src/github.com/stelligent/config-lint
- run:
name: Release
command: |
Expand Down
11 changes: 6 additions & 5 deletions cli/assets/terraform.yml
Original file line number Diff line number Diff line change
Expand Up @@ -573,7 +573,7 @@ rules:
op: eq
value: lambda:InvokeFunction
tags:
- lambda
- lambda

- id: LAMBDA_PERMISSION_WILDCARD_PRINCIPAL
message: Lambda permission should not have wildcard principal
Expand All @@ -584,7 +584,7 @@ rules:
op: ne
value: "*"
tags:
- lambda
- lambda

- id: LAMBDA_FUNCTION_ENCRYPTION
message: Lambda function should use encryption
Expand Down Expand Up @@ -791,7 +791,7 @@ rules:
op: present
tags:
- firehose

- id: KINESIS_STREAM_KMS
message: Kinesis streams should be associated with a kms key
resource: aws_kinesis_stream
Expand Down Expand Up @@ -983,6 +983,7 @@ rules:
op: present
tags:
- emr

- id: AWS_KMS_KEY_ROTATION
message: AWS KMS Key Rotation should be enabled
resource: aws_kms_key
Expand All @@ -1002,8 +1003,7 @@ rules:
op: present
tags:
- sagemaker
-
-

- id: SAGEMAKER_NOTEBOOK_ENCRYPTION
message: Sagemaker Notebook should be encrypted
resource: aws_sagemaker_notebook_instance
Expand All @@ -1013,6 +1013,7 @@ rules:
op: present
tags:
- sagemaker

# add KMS key policy version
# ECR repository policy
# add ElasticSearch domain access policy version
28 changes: 21 additions & 7 deletions go.mod
Original file line number Diff line number Diff line change
@@ -1,20 +1,34 @@
module github.com/MikeSchapp/config-lint
module github.com/mikeschapp/config-lint

go 1.11
go 1.12

require (
github.com/Masterminds/vcs v1.13.0 // indirect
github.com/armon/go-radix v1.0.0 // indirect
github.com/aws/aws-sdk-go v1.14.27
github.com/boltdb/bolt v1.3.1 // indirect
github.com/fzipp/gocyclo v0.0.0-20150627053110-6acd4345c835 // indirect
github.com/ghodss/yaml v1.0.0
github.com/go-ini/ini v1.38.1 // indirect
github.com/gobuffalo/packd v0.0.0-20181120223505-a1fb7d1c9873 // indirect
github.com/gobuffalo/packr v1.21.3
github.com/gobuffalo/syncx v0.0.0-20181120194010-558ac7de985f // indirect
github.com/gobuffalo/events v1.1.8 // indirect
github.com/gobuffalo/packr v1.25.0
github.com/gobuffalo/packr/v2 v2.3.2 // indirect
github.com/golang/dep v0.5.3 // indirect
github.com/hashicorp/hcl v1.0.0
github.com/hashicorp/hil v0.0.0-20170627220502-fa9f258a9250
github.com/jmank88/nuts v0.3.0 // indirect
github.com/jmespath/go-jmespath v0.0.0-20160202185014-0b12d6b521d8
github.com/mitchellh/reflectwalk v1.0.0 // indirect
github.com/nightlyone/lockfile v0.0.0-20180618180623-0ad87eef1443 // indirect
github.com/sdboyer/constext v0.0.0-20170321163424-836a14457353 // indirect
github.com/smartystreets/goconvey v0.0.0-20190330032615-68dc04aab96a // indirect
github.com/spf13/pflag v1.0.3 // indirect
github.com/stretchr/testify v1.2.2
github.com/stelligent/config-lint v0.0.36
github.com/stretchr/testify v1.3.0
golang.org/x/crypto v0.0.0-20190611184440-5c40567a22f8 // indirect
golang.org/x/lint v0.0.0-20190409202823-959b441ac422 // indirect
golang.org/x/net v0.0.0-20190611141213-3f473d35a33a // indirect
golang.org/x/sys v0.0.0-20190610200419-93c9922d18ae // indirect
golang.org/x/text v0.3.2 // indirect
golang.org/x/tools v0.0.0-20190612180059-59534d075a87 // indirect
gopkg.in/ini.v1 v1.42.0 // indirect
)
Loading

0 comments on commit 8225a21

Please sign in to comment.