diff --git a/checks/check_extra768 b/checks/check_extra768 index 2c10e1dde1..b969702017 100644 --- a/checks/check_extra768 +++ b/checks/check_extra768 @@ -33,8 +33,8 @@ extra768(){ TASK_DEFINITION_ENV_VARIABLES_FILE="$SECRETS_TEMP_FOLDER/extra768-$TASK_DEFINITION-$regx-variables.txt" TASK_DEFINITION_ENV_VARIABLES=$($AWSCLI ecs $PROFILE_OPT --region $regx describe-task-definition --task-definition $taskDefinition --query 'taskDefinition.containerDefinitions[*].environment' --output text > $TASK_DEFINITION_ENV_VARIABLES_FILE) if [ -s $TASK_DEFINITION_ENV_VARIABLES_FILE ];then - # Implementation using https://github.com/Yelp/detect-secrets - FINDINGS=$(secretsDetector file $TASK_DEFINITION_ENV_VARIABLES_FILE) + # Implementation using https://github.com/Yelp/detect-secrets + FINDINGS=$(secretsDetector file $TASK_DEFINITION_ENV_VARIABLES_FILE) if [[ $FINDINGS -eq 0 ]]; then textPass "$regx: No secrets found in ECS task definition $TASK_DEFINITION variables" "$regx" # delete file if nothing interesting is there diff --git a/run.sh b/run.sh index 8f93055280..f14ac9e6e4 100755 --- a/run.sh +++ b/run.sh @@ -2,7 +2,7 @@ mkdir ~/.aws cat << AWS_CREDS > ~/.aws/credentials -[default] +[${ACCOUNT_ID}] credential_source = EcsContainer role_arn = ${ROLE_ARN} external_id = ${EXTERNAL_ID} @@ -10,7 +10,7 @@ external_id = ${EXTERNAL_ID} AWS_CREDS echo "Running prowler on ${ACCOUNT_ID}" -./prowler -p default "${CHECKS}" -M json > output.json +./prowler -p "${ACCOUNT_ID}" "${CHECKS}" -M json > output.json echo "Results:" cat output.json