aquasecurity / aquasecurity/cloudsploit
ftpsOnlyAccessEnabled.js is returning incorrect results
- Dominant language
- JavaScript
- Stars
- 3.8k
- Forks
- 751
- Avg merge
- 11d 9h
- Merged PRs (30d)
- 3
Description
ftpsOnlyAccessEnabled.js is returning false positives. Rather than returning a result for each individual app service it appears as though if there is one failure on one resource all resources of that type fail.
In the screenshot I sent of the fail. The resource highlighted in yellow should have failed. The second resource should have passed the test.

Contributor guide
Research direction
Start with ftpsOnlyAccessEnabled.js and reproduce the screenshot scenario with multiple app services. Check how results are aggregated across resources; done when each app service receives its own result, with only the failing resource reported as failed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100