duo-labs / duo-labs/cloudmapper

Request updated policyuniverse version

Open
#683 3 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
JavaScript
Stars
6.3k
Forks
836
PR merge metrics
No merged PRs in 30d

Description

Hello,

We have a few S3 buckets which use Bucket Policies to allow read access (List and Get) to our AWS Organization. Cloudmapper is currently flagging these buckets as public. This was a bug in policyuniverse - https://github.com/Netflix-Skunkworks/policyuniverse/issues/14 that was fixed in https://github.com/Netflix-Skunkworks/policyuniverse/commit/5f17ba0efa9999c51b45202f59903ae10c97986e on March 4, 2019, and released in policyuniverse 1.3.0.1 on March 22, 2019.

However, cloudmapper is using policyuniverse 1.1.0.1, which was released on November 4, 2017 and is 8 versions old.

Would it be possible to have the policyuniverse version bumped to something more current?

Thanks!

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.