checkov icon indicating copy to clipboard operation
checkov copied to clipboard

CKV_GCP_79: Update latest Major Postgres version to 16

Open lucaspierru-convelio opened this issue 1 year ago • 2 comments

Describe the issue CKV_GCP_79: "Ensure SQL database is using latest Major version" is outdated now that Postgres 16 is available on GCP. We should update this rule to ensure it checks for Postgres 16 instead of 15.

Examples This triggers check CKV_GCP_79:

resource "google_sql_database_instance" "default" {
  database_version = "POSTGRES_16"

when it should pass the check.

https://github.com/bridgecrewio/checkov/blob/91932f8c23eae0eaf9fd2b705a936c06c45185c5/checkov/terraform/checks/resource/gcp/CloudSqlMajorVersion.py#L17 should be updated to "POSTGRES_16"

Version (please complete the following information):

  • Checkov Docker image version 3.2.238

lucaspierru-convelio avatar Aug 28 '24 08:08 lucaspierru-convelio

@lucaspierru-convelio thanks for the comment, would you want to open a PR to add this behavior?

bo156 avatar Aug 29 '24 14:08 bo156

@bo156 @qdelettre took care of it, its PR is still open and needs reviewing: https://github.com/bridgecrewio/checkov/pull/6695

lucaspierru-convelio avatar Sep 12 '24 09:09 lucaspierru-convelio