aquasecurity / aquasecurity/cloudsploit
CIS compliance missing in Azure & GCP plugins.
Open
- Dominant language
- JavaScript
- Stars
- 3.8k
- Forks
- 751
- Avg merge
- 11d 9h
- Merged PRs (30d)
- 3
Description
Whenever I try to run the report for Azure Cloud using CIS compliance, I get the error as Nothing to collect as there is no compliance object there for CIS benchmark unlike for HIPAA and PCI.
Please do let me know if there is going to be any update on this.
Contributor guide
Research direction
Start by reproducing the Azure CIS report and inspect the Azure and GCP plugins' compliance definitions, comparing them with the existing HIPAA and PCI entries. Done means CIS reports for Azure and GCP collect compliance data instead of returning “Nothing to collect.”
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure, gcp, javascript
- Domain
- cloud, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100