ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-23 12:31:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(containerregistry): extract Container Registry resource metadata in automated way (#6530)

Browse Source
This commit is contained in:
Rubén De la Torre Vico
2025-01-15 14:51:16 +01:00
committed by GitHub
parent 0db46cdc81
commit 3dfd578ee5
3 changed files with 12 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
prowler/providers/azure/services/containerregistry/containerregistry_admin_user_disabled/containerregistry_admin_user_disabled.py
+4 -5
View File
@@ -9,12 +9,11 @@ class containerregistry_admin_user_disabled(Check):
findings = []
for subscription, registries in containerregistry_client.registries.items():
for registry_id, container_registry_info in registries.items():
report = Check_Report_Azure(self.metadata())
for container_registry_info in registries.values():
report = Check_Report_Azure(
metadata=self.metadata(), resource_metadata=container_registry_info
)
report.subscription = subscription
report.resource_name = container_registry_info.name
report.resource_id = registry_id
report.location = container_registry_info.location
report.status = "FAIL"
report.status_extended = f"Container Registry {container_registry_info.name} from subscription {subscription} has its admin user enabled."
prowler/providers/azure/services/containerregistry/containerregistry_not_publicly_accessible/containerregistry_not_publicly_accessible.py
+4 -5
View File
@@ -9,12 +9,11 @@ class containerregistry_not_publicly_accessible(Check):
findings = []
for subscription, registries in containerregistry_client.registries.items():
for registry_id, container_registry_info in registries.items():
report = Check_Report_Azure(self.metadata())
for container_registry_info in registries.values():
report = Check_Report_Azure(
metadata=self.metadata(), resource_metadata=container_registry_info
)
report.subscription = subscription
report.resource_name = container_registry_info.name
report.resource_id = registry_id
report.location = container_registry_info.location
report.status = "FAIL"
report.status_extended = f"Container Registry {container_registry_info.name} from subscription {subscription} allows unrestricted network access."
prowler/providers/azure/services/containerregistry/containerregistry_uses_private_link/containerregistry_uses_private_link.py
+4 -5
View File
@@ -9,12 +9,11 @@ class containerregistry_uses_private_link(Check):
findings = []
for subscription, registries in containerregistry_client.registries.items():
for registry_id, container_registry_info in registries.items():
report = Check_Report_Azure(self.metadata())
for container_registry_info in registries.values():
report = Check_Report_Azure(
metadata=self.metadata(), resource_metadata=container_registry_info
)
report.subscription = subscription
report.resource_name = container_registry_info.name
report.resource_id = registry_id
report.location = container_registry_info.location
report.status = "FAIL"
report.status_extended = f"Container Registry {container_registry_info.name} from subscription {subscription} does not use a private link."