Skip to content
#

compliance

Here are 442 public repositories matching this topic...

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

  • Updated Aug 5, 2022
  • Shell
immudb
zaza81
zaza81 commented Oct 19, 2021

As a result of the showcase, we should improve the following messages:

  • “column does not exist”: Which one?
  • “syntax error: unexpected IDENTIFIER”: Would like to
  • have a hint where to look for the error in my statement.
  • "pq: syntax error: unexpected $unk"
good first issue Component::immudb
senaas1995
senaas1995 commented Aug 1, 2022

Short description

We are using opa's discovery feature to dynamically download s3 bundles. Our policy file looks as shown below. This policy successfully downloads and activates "/main_bundle/authz.tar.gz".

package discovery

bundle_config := {
  "bundles": {
    "main": {
      "service": "s3_service",
      "resource": bundle_name
    },
  },
  "default_decision": "/aut
prowler

Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 240 controls covering CIS, PCI-DSS, ISO27001, GDPR, HIPAA, FFIEC, SOC2, AWS FTR, ENS and custom security frameworks.

  • Updated Aug 5, 2022
  • Shell
haimbrum
haimbrum commented Aug 4, 2022

Describe the issue
It seems like Checkov Terraform scan introduces false positive checks when assigning aws_security_group to aws_memorydb_cluster resource

Examples
The following resources were defined in the same .tf file without using modules.

resource "aws_security_group" "secgrp" {
  ...
  name        = "test-redis-secgrp"
  description = "test-redis-secgrp"
  
good first issue checks terraform
JazJas
JazJas commented Aug 14, 2020

The command exist test always returns true regardless of if the command is invalid.

Describe the problem

On Windows, we want to test if a command/cmdlet exists before running it. However, the 'command().exist?‘ test always returns true no matter what command t

Type: Bug Platform: Windows Component: Core Resources Good first issue
ggbecker
ggbecker commented Apr 20, 2022

Extend macro function that creates OCIL entries for package removed rules to support both package removed/installed rules using an extra parameter to define the behavior of the ocil_clause (the ocil clause "package is installed" for removed package rules and "package is not installed" for installed package rules)

https://github.com/ComplianceAsCode/content/blob/fe68fcd788b85eed7559e6174d71a67

good first issue

LunaSec - Open Source AppSec platform that automatically notifies you the next time vulnerabilities like Log4Shell or node-ipc happen. Track your dependencies and builds in a centralized service. Get started in one-click via our GitHub App or host it yourself. https://github.com/apps/lunatrace-by-lunasec/

  • Updated Aug 5, 2022
  • TypeScript
cfn_nag
sfarazkazmi
sfarazkazmi commented Jun 16, 2021

Describe the bug
When using parse-tree command, error information in printed twice with slightly different text.

To Reproduce
Please supply:

var status = ['ACTIVE']

NOTE: Please be sure that the templates, rules and logs you provide as part of your bug report do not contain any sensitive information.

Expected behavior
There should be one error log instead of dupli

bug good first issue help wanted
ElectricEye

Continuously monitor your AWS attack surface and evaluate services for configurations that can lead to degradation of confidentiality, integrity or availability. All results can be exported to Security Hub, JSON, CSV, Databases, and more for further aggregation and analysis.

  • Updated Aug 4, 2022
  • Python

Improve this page

Add a description, image, and links to the compliance topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the compliance topic, visit your repo's landing page and select "manage topics."

Learn more