cfripper icon indicating copy to clipboard operation
cfripper copied to clipboard

Library and CLI tool for analysing CloudFormation templates and check them for security compliance.

Results 14 cfripper issues
Sort by recently updated
recently updated
newest added

## [1.13.0] ### Additions - Default logging level from INFO to WARNING #230 ### Updates - `GenericResourceWildcardPrincipalRule` (therefore `GenericResourcePartialWildcardPrincipalRule` and `GenericResourceFullWildcardPrincipalRule` as well) now ignores `AWS::KMS::ReplicaKey`. It as the same...

## [1.13.0] ### Additions - `Config` includes a metrics logger and it is called to register when a filter is used

Hi, Are there any plans to support junitxml output support? This would make it easier to integrate into CI/CD pipelines with reports and metrics. Thanks

good first issue

CFRipper version 0.22.0 gives a false positive for missing egress rules. It happens when the rule is defined as a SecurityGroupEgress resource. Consider the following test1.yml template. It creates security...

Bumps [cryptography](https://github.com/pyca/cryptography) from 42.0.3 to 42.0.5. Changelog Sourced from cryptography's changelog. 42.0.5 - 2024-02-23 * Limit the number of name constraint checks that will be performed in :mod:`X.509 path validation...

dependencies
python

Bumps [pydantic](https://github.com/pydantic/pydantic) from 1.10.14 to 2.6.3. Release notes Sourced from pydantic's releases. v2.6.3 2024-02-27 What's Changed Packaging Update pydantic-settings version in the docs by @​hramezani in #8906 Fixes Fix discriminated...

dependencies
python

We add an actionability parameter to the base class rule. If `True`, this parameter indicates that the non-fulfilment of the rule can be solved without recreating any resource and/or stack....

Hi **Cfripper version:** cfripper, version 1.15.1 **Installed via:** pip congrats on your fantastic tool. I'm just playing around a little bit. So far, I've checked two YAML files and I...