cfripper
cfripper copied to clipboard
Library and CLI tool for analysing CloudFormation templates and check them for security compliance.
## [1.13.0] ### Additions - Default logging level from INFO to WARNING #230 ### Updates - `GenericResourceWildcardPrincipalRule` (therefore `GenericResourcePartialWildcardPrincipalRule` and `GenericResourceFullWildcardPrincipalRule` as well) now ignores `AWS::KMS::ReplicaKey`. It as the same...
## [1.13.0] ### Additions - `Config` includes a metrics logger and it is called to register when a filter is used
Hi, Are there any plans to support junitxml output support? This would make it easier to integrate into CI/CD pipelines with reports and metrics. Thanks
CFRipper version 0.22.0 gives a false positive for missing egress rules. It happens when the rule is defined as a SecurityGroupEgress resource. Consider the following test1.yml template. It creates security...
Bumps [cryptography](https://github.com/pyca/cryptography) from 42.0.3 to 42.0.5. Changelog Sourced from cryptography's changelog. 42.0.5 - 2024-02-23 * Limit the number of name constraint checks that will be performed in :mod:`X.509 path validation...
Bumps [pydantic](https://github.com/pydantic/pydantic) from 1.10.14 to 2.6.3. Release notes Sourced from pydantic's releases. v2.6.3 2024-02-27 What's Changed Packaging Update pydantic-settings version in the docs by @hramezani in #8906 Fixes Fix discriminated...
We add an actionability parameter to the base class rule. If `True`, this parameter indicates that the non-fulfilment of the rule can be solved without recreating any resource and/or stack....
Hi **Cfripper version:** cfripper, version 1.15.1 **Installed via:** pip congrats on your fantastic tool. I'm just playing around a little bit. So far, I've checked two YAML files and I...