aquasecurity / aquasecurity/cloudsploit

Plugins that uses new feature ASL returning false-positive.

Open
#697 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
3.8k
Forks
751
Avg merge
11d 9h
Merged PRs (30d)
3

Description

Hi,
seems that the new feature that uses ASL like in https://github.com/aquasecurity/cloudsploit/blob/9d5683d37fca57d2749ca9edef262fdbd136051d/plugins/aws/kms/kmsScheduledDeletion.js#L12 is generating false-positive alerts.
For instance AWS KMS Keys don`t return the expected parameter "PendingDeletetion" and therefore is given status Failing, and those keys with PendingDeletion states are getting OK result.

Contributor guide

Open the contributing guide

Research direction

Start with plugins/aws/kms/kmsScheduledDeletion.js at the linked lines and inspect how the KMS state parameter is read and mapped to findings. Reproduce the behavior with keys in pending-deletion and other states; done means those states produce accurate, non-false-positive results.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, javascript
Domain
cloud, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.