duo-labs / duo-labs/cloudmapper
Expand what is classified as public
Open
audit
- Dominant language
- JavaScript
- Stars
- 6.3k
- Forks
- 836
- PR merge metrics
- No merged PRs in 30d
Description
If an S3 bucket allows `0.0.0.0/1` (ie. half the Internet) it will be not be classified as public by policyuniverse https://github.com/Netflix-Skunkworks/policyuniverse/blob/master/policyuniverse/statement.py#L299
Similarly S3 Public Block Access does not consider something public if it is a /2.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.