aquasecurity / aquasecurity/cloudsploit
Plugins that uses new feature ASL returning false-positive.
- Dominant language
- JavaScript
- Stars
- 3.8k
- Forks
- 751
- Avg merge
- 11d 9h
- Merged PRs (30d)
- 3
Description
Hi,
seems that the new feature that uses ASL like in https://github.com/aquasecurity/cloudsploit/blob/9d5683d37fca57d2749ca9edef262fdbd136051d/plugins/aws/kms/kmsScheduledDeletion.js#L12 is generating false-positive alerts.
For instance AWS KMS Keys don`t return the expected parameter "PendingDeletetion" and therefore is given status Failing, and those keys with PendingDeletion states are getting OK result.
Contributor guide
Research direction
Start with plugins/aws/kms/kmsScheduledDeletion.js at the linked lines and inspect how the KMS state parameter is read and mapped to findings. Reproduce the behavior with keys in pending-deletion and other states; done means those states produce accurate, non-false-positive results.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, javascript
- Domain
- cloud, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100