Cortex AppSec Rule Reference

Get Started
IaC Security
AI And Machine Learning
AWS SageMaker notebook instance not configured with data encryption at rest using KMS key misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS SageMaker endpoint data encryption at rest not configured misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS SageMaker notebook instance configured with direct internet access feature misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Sagemaker domain not encrypted using Customer Managed Key misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Kendra index Server side encryption does not use Customer Managed Keys (CMKs) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS SageMaker notebook instance with root access enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Sagemaker data quality job not encrypting model artifacts with KMS misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Sagemaker data quality job not using KMS to encrypt data on attached storage volume misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Sagemaker data quality job not encrypting communications between instances used for monitoring jobs misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS SageMaker model does not use network isolation misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS SageMaker notebook instance allows for IMDSv1 misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS SageMaker Flow Definition does not use KMS for output configurations misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Bedrock agent is not associated with Bedrock guardrails misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Synapse Workspaces do not enable managed virtual networks misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Cognitive Services account configured with public network access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Machine Learning Compute Cluster Local Authentication is enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Machine Learning Workspace is publicly accessible misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Machine Learning Compute Cluster Minimum Nodes is not set to 0 misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Data exfiltration protection for Azure Synapse workspace is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Databricks workspace is public misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Cognitive Services account configured with local authentication misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Cognitive Services account is not configured with managed identity misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Synapse workspace administrator login password exposed misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Synapse Workspace not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Synapse SQL pool not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Synapse Spark Pool not using isolated compute misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Machine learning workspace is not configured with private endpoint misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Cognitive Services account hosted with OpenAI is not configured with data loss prevention misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Vertex AI datasets do not use a Customer Manager Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Vertex AI Metadata Store does not use a Customer Manager Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Dataproc Clusters have public IPs misconfiguration detected in code
Rule Details
How to Fix
GCP DataFusion does not have stack driver logging enabled misconfiguration detected in code
Rule Details
How to Fix
GCP DataFusion does not have stack driver monitoring enabled misconfiguration detected in code
Rule Details
How to Fix
GCP Vertex AI Workbench user-managed notebook has vTPM disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Vertex AI Workbench user-managed notebook has Integrity monitoring disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS SageMaker notebook instance IAM policy is overly permissive misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Synapse workspaces have IP firewall rules attached misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Cognitive Services does not Customer Managed Keys (CMKs) for encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Synapse Workspace vulnerability assessment is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Databricks Workspaces not using customer-managed key for root DBFS encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Machine learning workspace configured with overly permissive network access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Storage Account storing Machine Learning workspace high business impact data is publicly accessible misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Synapse SQL Pool does not have a security alert policy misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Synapse SQL Pool vulnerability assessment disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Synapse Workspace does not have extended audit logs misconfiguration detected in code
Rule Details
Impact
How to Fix
Log monitoring disabled for Azure Synapse SQL Pool misconfiguration detected in code
Rule Details
Impact
How to Fix
Vertex AI endpoint is not using a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
Vertex AI featurestore is not configured to use a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
Vertex AI tensorboard does not use a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
Vertex AI endpoint is public misconfiguration detected in code
Rule Details
Impact
How to Fix
Vertex AI index endpoint is public misconfiguration detected in code
Rule Details
Impact
How to Fix
Vertex AI runtime is not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
Vertex AI runtime is public misconfiguration detected in code
Rule Details
Impact
How to Fix
Compute
Alibaba Cloud RDS instance is not set to perform auto upgrades for minor versions misconfiguration detected in code
Rule Details
Impact
How to Fix
Disabled Ansible URI certificate validation misconfiguration detected in code
Rule Details
Impact
How to Fix
Certificate validation disabled with Ansible get_url module misconfiguration detected in code
Rule Details
Impact
How to Fix
SSL certificate validation disabled with Ansible Yum misconfiguration detected in code
Rule Details
Impact
How to Fix
SSL validation is disabled with yum misconfiguration detected in code
Rule Details
Impact
How to Fix
Usage of packages with unauthenticated or missing signatures allowed misconfiguration detected in code
Rule Details
Impact
How to Fix
Usage of the force parameter disabling signature validation allowed misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Lambda functions with tracing not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
API Gateway does not have X-Ray tracing enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EC2 instance not configured with Instance Metadata Service v2 (IMDSv2) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EMR cluster is not configured with Kerberos Authentication misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Lambda function is not configured for function-level concurrent execution Limit misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Lambda function is not configured for a DLQ misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Lambda Function is not assigned to access within VPC misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS API Gateway caching is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Autoscaling groups did not supply tags to launch configurations misconfiguration detected in code
Rule Details
Impact
How to Fix
ECR image scan on push is not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS MQBroker's minor version updates are disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS MQBroker version is not up to date misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Batch Job is defined as a privileged container misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS API deployments do not enable Create before Destroy misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS DMS replication instance automatic version upgrade disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS API Gateway method settings do not enable caching misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS DB instance does not get all minor upgrades automatically misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS ACM certificate does not enable Create before Destroy misconfiguration detected in code
Rule Details
Impact
How to Fix
Ensure AWS API gateway enables Create before Destroy misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS HTTP and HTTPS target groups do not define health check misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Lambda function is not configured to validate code-signing misconfiguration detected in code
Rule Details
Impact
How to Fix
API Gateway method setting is not set to encrypted caching misconfiguration detected in code
Rule Details
Impact
How to Fix
RDS cluster is not configured to copy tags to snapshots misconfiguration detected in code
Rule Details
Impact
How to Fix
EC2 Auto Scaling groups are not utilizing EC2 launch templates misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CodeBuild project environment privileged mode is enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Elasticsearch domains are not configured with a minimum of three dedicated master nodes misconfiguration detected in code
Rule Details
Impact
How to Fix
Redshift clusters are not using the default database name. misconfiguration detected in code
Rule Details
Impact
How to Fix
Redshift clusters are not using enhanced VPC routing misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS ElastiCache Redis cluster automatic version upgrade disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
ECS Fargate services are not ensured to run on the latest Fargate platform version misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS ECS task definition elevated privileges enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
ECS task definitions have their own unique process namespace or share the host's process namespace misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS ECS task definition is not configured with read-only access to container root filesystems misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elastic Beanstalk environment managed platform updates are not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Auto Scaling group launch configuration configured with Instance Metadata Service hop count greater than 1 misconfiguration detected in code
Rule Details
Impact
How to Fix
Runtime of Lambda is deprecated misconfiguration detected in code
Rule Details
Impact
How to Fix
Hard-coded secrets found in Parameter Store values misconfiguration detected in code
Rule Details
Impact
How to Fix
Potential WhoAMI name confusion attack exposure misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS SQS queue access policy is overly permissive misconfiguration detected in code
Rule Details
Impact
How to Fix
Secrets are exposed in Azure VM customData misconfiguration detected in code
Rule Details
How to Fix
Azure Linux scale set does not use an SSH key misconfiguration detected in code
Rule Details
Impact
How to Fix
Virtual Machine extensions are installed misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App Service Web app doesn't use latest .Net framework version misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App Service Web app does not use latest PHP version misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App Service Web app does not use latest Python version misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App Service Web app does not use latest Java version misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Linux and Windows Virtual Machines does not utilize Managed Disks misconfiguration detected in code
Rule Details
Impact
How to Fix
Automatic OS image patching is disabled for Virtual Machine scale sets misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Data Factory does not use Git repository for source control misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Service Fabric cluster not configured with cluster protection level security misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Container Registry (ACR) Isn't Configured to Use Signed/Trusted Images misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Kubernetes Cluster (AKS) Nodes Don't Limit the Maximum Pods to Greater than 50 misconfiguration detected in code
Rule Details
How to Fix
Azure Kubernetes Cluster (AKS) Nodes Do Not Use Scale Sets misconfiguration detected in code
Rule Details
How to Fix
AKS Doesn't Use the Paid SKU for its SLA misconfiguration detected in code
Rule Details
Impact
How to Fix
AKS Cluster Without Upgrade Channel misconfiguration detected in code
Rule Details
How to Fix
Windows VM Without Automatic Updates misconfiguration detected in code
Rule Details
Impact
How to Fix
VM Without Azure VM Agent Installed misconfiguration detected in code
Rule Details
Impact
How to Fix
App Configuration Not Using Standard SKU misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App Service Plan is Not Suitable for Production misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App Service Not Always On misconfiguration detected in code
Rule Details
Impact
How to Fix
Operating system disks are not ephemeral disks misconfiguration detected in code
Rule Details
Impact
How to Fix
Non-Critical System Pods Run on System Nodes misconfiguration detected in code
Rule Details
Impact
How to Fix
Healthcheck instructions have not been added to container images misconfiguration detected in code
Rule Details
Impact
How to Fix
A user for the container has not been created misconfiguration detected in code
Rule Details
Impact
How to Fix
Copy is not used instead of Add in Dockerfiles misconfiguration detected in code
Rule Details
Impact
How to Fix
Update instructions are used alone in a Dockerfile misconfiguration detected in code
Rule Details
Impact
How to Fix
LABEL maintainer is used instead of MAINTAINER (deprecated) misconfiguration detected in code
Rule Details
Impact
How to Fix
Base image uses a latest version tag misconfiguration detected in code
Rule Details
Impact
How to Fix
Last USER is root misconfiguration detected in code
Rule Details
Impact
How to Fix
Docker APT is used misconfiguration detected in code
Rule Details
Impact
How to Fix
Docker WORKDIR values are not absolute paths misconfiguration detected in code
Rule Details
Impact
How to Fix
Docker From alias is not unique for multistage builds misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine Clusters not using Container-Optimized OS for Node image misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine Clusters have legacy compute engine metadata endpoints enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes cluster shielded GKE node with Secure Boot disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes cluster Shielded GKE Nodes feature disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP SQL database does not use the latest Major version misconfiguration detected in code
Rule Details
Impact
How to Fix
GKE NodePool configuration managed at cluster level misconfiguration detected in code
Rule Details
Impact
How to Fix
Containers wishing to share host process ID namespace admitted misconfiguration detected in code
Rule Details
Impact
How to Fix
Privileged containers are admitted misconfiguration detected in code
Rule Details
Impact
How to Fix
Containers wishing to share host IPC namespace admitted misconfiguration detected in code
Rule Details
Impact
How to Fix
Root containers admitted misconfiguration detected in code
Rule Details
Impact
How to Fix
Containers with NET_RAW capability admitted misconfiguration detected in code
Rule Details
Impact
How to Fix
CPU request is not set misconfiguration detected in code
Rule Details
Impact
How to Fix
CPU limits are not set misconfiguration detected in code
Rule Details
Impact
How to Fix
Memory requests are not set misconfiguration detected in code
Rule Details
Impact
How to Fix
Memory limits are not set misconfiguration detected in code
Rule Details
Impact
How to Fix
Image tag is not set to Fixed misconfiguration detected in code
Rule Details
Impact
How to Fix
Image pull policy is not set to Always misconfiguration detected in code
Rule Details
Impact
How to Fix
Container is privileged misconfiguration detected in code
Rule Details
Impact
How to Fix
Containers share host process ID namespace misconfiguration detected in code
Rule Details
Impact
How to Fix
Containers share host IPC namespace misconfiguration detected in code
Rule Details
Impact
How to Fix
Containers run with AllowPrivilegeEscalation misconfiguration detected in code
Rule Details
Impact
How to Fix
Default namespace is used misconfiguration detected in code
Rule Details
Impact
How to Fix
Read-Only filesystem for containers is not used misconfiguration detected in code
Rule Details
Impact
How to Fix
Admission of root containers not minimized misconfiguration detected in code
Rule Details
Impact
How to Fix
Containers with added capability are allowed misconfiguration detected in code
Rule Details
Impact
How to Fix
Admission of containers with added capability is not minimized misconfiguration detected in code
Rule Details
Impact
How to Fix
Mounting Docker socket daemon in a container is not limited misconfiguration detected in code
Rule Details
Impact
How to Fix
Admission of containers with NET_RAW capability is not minimized misconfiguration detected in code
Rule Details
Impact
How to Fix
securityContext is not applied to pods and containers misconfiguration detected in code
Rule Details
Impact
How to Fix
securityContext is not applied to pods and containers in container context misconfiguration detected in code
Rule Details
Impact
How to Fix
seccomp is not set to Docker/Default or Runtime/Default misconfiguration detected in code
Rule Details
Impact
How to Fix
seccomp profile is not set to Docker/Default or Runtime/Default misconfiguration detected in code
Rule Details
Impact
How to Fix
Kubernetes dashboard is deployed misconfiguration detected in code
Rule Details
Impact
How to Fix
Tiller (Helm V2) is deployed misconfiguration detected in code
Rule Details
Impact
How to Fix
Admission of containers with capabilities assigned is not minimised misconfiguration detected in code
Rule Details
Impact
How to Fix
Admission of containers with capabilities assigned is not limited misconfiguration detected in code
Rule Details
Impact
How to Fix
CAP_SYS_ADMIN Linux capability is used misconfiguration detected in code
Rule Details
Impact
How to Fix
Containers do not run with a high UID misconfiguration detected in code
Rule Details
Impact
How to Fix
Images are not selected using a digest misconfiguration detected in code
Rule Details
Impact
How to Fix
Tiller (Helm v2) service is not deleted misconfiguration detected in code
Rule Details
Impact
How to Fix
The admission control plugin EventRateLimit is not set misconfiguration detected in code
Rule Details
Impact
How to Fix
The admission control plugin AlwaysAdmit is set misconfiguration detected in code
Rule Details
Impact
How to Fix
The admission control plugin AlwaysPullImages is not set misconfiguration detected in code
Rule Details
Impact
How to Fix
The admission control plugin NamespaceLifecycle is not set misconfiguration detected in code
Rule Details
Impact
How to Fix
The --terminated-pod-gc-threshold argument for controller managers is not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
The --streaming-connection-idle-timeout argument is set to 0 misconfiguration detected in code
Rule Details
Impact
How to Fix
The --protect-kernel-defaults argument is not set to True misconfiguration detected in code
Rule Details
Impact
How to Fix
The --hostname-override argument is set misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Compute Instance boot volume has in-transit data encryption is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Compute Instance has Legacy MetaData service endpoint enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Operation objects do not have the 'produces' field defined for GET operations misconfiguration detected in code
Rule Details
Impact
How to Fix
Operation objects for PUT, POST, and PATCH operations do not have a 'consumes' field defined misconfiguration detected in code
Rule Details
Impact
How to Fix
Array does not have a maximum number of items misconfiguration detected in code
Rule Details
Impact
How to Fix
DNF usage of packages with untrusted or missing GPG signatures allowed misconfiguration detected in code
Rule Details
Impact
How to Fix
SSL validation disabled within Ansible DNF module misconfiguration detected in code
Rule Details
Impact
How to Fix
Certificate validation disabled within Ansible DNF module misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elasticsearch domain has Dedicated master set to disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Virtual Machines does not utilise Managed Disks misconfiguration detected in code
Rule Details
Impact
How to Fix
Microsoft Antimalware is not configured to automatically update Virtual Machines misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile contains the use of 'sudo' misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile certificate validation is disabled with curl misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile certificate validation is disabled with wget misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile certificate validation is disabled with the pip '--trusted-host' option misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile certificate validation is disabled with the PYTHONHTTPSVERIFY environment variable misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile Node.js certificate validation is disabled with the NODE_TLS_REJECT_UNAUTHORIZED environment variable misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile APK package manager is configured to allow untrusted repositories misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile APT package manager is configured to allow unauthenticated packages misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile YUM package manager is configured to skip GPG signature checks misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile RPM package manager is configured to skip package signature checks misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile APT package manager is configured to force package installations without prompts or verifications misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile configuration disables strict SSL for NPM misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile sets NPM configuration to disable strict SSL misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile configures GIT to disable SSL verification misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile sets YUM configuration to disable SSL verification misconfiguration detected in code
Rule Details
Impact
How to Fix
Dockerfile uses a trusted host with pip misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine Clusters have Alpha cluster feature enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
IAM
Alibaba Cloud RAM password policy does not have a minimum of 14 characters misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud RAM password policy does not have a number misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud RAM password policy does not have a symbol misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud RAM password policy does not expire in 90 days misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud RAM password policy does not have a lowercase character misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud RAM password policy does not prevent password reuse misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud RAM password policy does not have an uppercase character misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud RAM password policy maximal login attempts is more than 4 misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud RAM does not enforce MFA misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud KMS Key Rotation is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud KMS Key is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM policies that allow full administrative privileges are created misconfiguration detected in code
Rule Details
Impact
Fix-Buildtime
AWS Customer Master Key (CMK) rotation is not enabled misconfiguration detected in code
Rule Details
How to Fix
AWS IAM password policy does not expire in 90 days misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM password policy does not have a minimum of 14 characters misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM password policy does not have a lowercase character misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM password policy does not have a number misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM password policy does allow password reuse misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM password policy does not have a symbol misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM password policy does not have an uppercase character misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Private ECR repository policy is overly permissive misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS KMS Key policy overly permissive misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM policy attached to users misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM policy documents do not allow * (asterisk) as a statement's action misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM role allows all services or principals to be assumed misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM policy allows all principals used by any AWS service from target account to assume role misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM policies that allow full "-" administrative privileges are created misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM policy documents allow * (asterisk) as a statement's action misconfiguration detected in code
Rule Details
Impact
How to Fix
SQS policy allows all actions misconfiguration detected in code
Rule Details
Impact
How to Fix
Credentials exposure actions return credentials in an API response misconfiguration detected in code
Rule Details
Impact
How to Fix
Data exfiltration allowed without resource constraints misconfiguration detected in code
Rule Details
Impact
How to Fix
Resource exposure allows modification of policies and exposes resources misconfiguration detected in code
Rule Details
Impact
How to Fix
IAM policies allow privilege escalation misconfiguration detected in code
Rule Details
Impact
Write access allowed without constraint misconfiguration detected in code
Rule Details
Impact
How to Fix
Respective logs of Amazon RDS are disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
RDS database does not have IAM authentication enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS cluster not configured with IAM authentication misconfiguration detected in code
Rule Details
Impact
How to Fix
Glacier Vault access policy is public and not restricted to specific services or principals misconfiguration detected in code
Rule Details
Impact
How to Fix
SQS queue policy is public and access is not restricted to specific services or principals misconfiguration detected in code
Rule Details
Impact
How to Fix
SNS topic policy is public and access is not restricted to specific services or principals misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS AMI launch permissions are not limited misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Key Management Service (KMS) key is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Execution Role ARN and Task Role ARN are different in ECS Task definitions misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Codecommit branch changes has less than 2 approvals misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Lambda function URL AuthType set to NONE misconfiguration detected in code
Rule Details
Impact
How to Fix
Access is not controlled through Single Sign-On (SSO) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS AdministratorAccess policy is used by IAM roles, users, or groups misconfiguration detected in code
Rule Details
Impact
How to Fix
IAM policy uses the AWS AdministratorAccess policy misconfiguration detected in code
Rule Details
Impact
How to Fix
IAM Policy Document Allows All or Any AWS Principal Permissions to Resources misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM Policy permission may cause privilege escalation misconfiguration detected in code
Rule Details
Impact
How to Fix
IAM policies allow exposure of credentials misconfiguration detected in code
Rule Details
Impact
How to Fix
IAM policies allow data exfiltration misconfiguration detected in code
Rule Details
Impact
How to Fix
IAM policies allow permissions management or resource exposure without constraints misconfiguration detected in code
Rule Details
Impact
How to Fix
IAM policies allow write access without constraints misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Lambda Function resource-based policy is overly permissive misconfiguration detected in code
Rule Details
Impact
How to Fix
Authorization type for API GatewayV2 routes is not specified misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Access key enabled on root account misconfiguration detected in code
Rule Details
Impact
How to Fix
IAM policy document allows all resources with restricted actions misconfiguration detected in code
Rule Details
Impact
How to Fix
Data source IAM policy document allows all resources with restricted actions misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS GitHub Actions OIDC authorization policies allow for unsafe claims or claim order misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Neptune Cluster not configured with IAM authentication misconfiguration detected in code
Rule Details
Impact
How to Fix
Permissions delegated to AWS services for AWS Lambda functions are not limited by SourceArn or SourceAccount misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Cognito identity pool allows unauthenticated guest access misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Security Group allows unrestricted egress traffic misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure AKS enable role-based access control (RBAC) not enforced misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure AKS cluster configured with overly permissive API server access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App Service Web app authentication is off misconfiguration detected in code
Rule Details
Impact
How to Fix
App Service is not registered with an Azure Active Directory account misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure subscriptions with custom roles does not have minimum permissions misconfiguration detected in code
Rule Details
How to Fix
Azure Function App authentication is off misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App Service Web app doesn't have a Managed Service Identity misconfiguration detected in code
Rule Details
Impact
How to Fix
AKS does not use Azure policies add-on misconfiguration detected in code
Rule Details
Impact
How to Fix
Active Directory is not used for authentication for Service Fabric misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure ACR admin account is enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure ACR enables anonymous image pulling misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure CosmosDB does not have Local Authentication disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Kubernetes Service (AKS) local admin account is enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL on Virtual Machine (Linux) with basic authentication misconfiguration detected in code
Rule Details
Impact
How to Fix
Web PubSub Without Managed Identities misconfiguration detected in code
Rule Details
Impact
How to Fix
Linux VM Without SSH Key misconfiguration detected in code
Rule Details
Impact
How to Fix
Data Explorer Not Using Managed Identities misconfiguration detected in code
Rule Details
Impact
How to Fix
App Configuration Using Local Authentication misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Event Grid Topic Managed Identity Provider misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Event Grid Topic Local Authentication Enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Event Grid Domain Managed Identity Provider is Disabled misconfiguration detected in code
Rule Details
How to Fix
Azure Event Grid Domain Local Authentication Enabled misconfiguration detected in code
Rule Details
How to Fix
Azure Service Bus Without Managed Identity Provider misconfiguration detected in code
Rule Details
How to Fix
Azure Service Bus with Local Authentication Enabled misconfiguration detected in code
Rule Details
How to Fix
Azure Cognitive Search Without Managed Identities misconfiguration detected in code
Rule Details
How to Fix
Local users used for Azure Storage misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure GitHub Actions OIDC trust policy is insecurely configured misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine Clusters have Legacy Authorization enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes engine clusters have client certificate disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine Clusters have pod security policy disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP VM instance configured with default service account misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP VM instance using a default service account with Cloud Platform access scope misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP IAM user are assigned Service Account User or Service Account Token creator roles at project level misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP IAM Service account does have admin privileges misconfiguration detected in code
Rule Details
How to Fix
Roles impersonate or manage Service Accounts used at folder level misconfiguration detected in code
Rule Details
Impact
How to Fix
Roles impersonate or manage Service Accounts used at organizational level misconfiguration detected in code
Rule Details
Impact
How to Fix
Default Service Account is used at project level misconfiguration detected in code
Rule Details
Impact
How to Fix
Default Service Account is used at organization level misconfiguration detected in code
Rule Details
Impact
How to Fix
Default Service Account is used at folder level misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP IAM primitive roles are in use misconfiguration detected in code
Rule Details
Impact
How to Fix
Kubernetes RBAC users are not managed with Google Groups for GKE misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine Clusters have binary authorization disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Memorystore for Redis has AUTH disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
KMS policy allows public access misconfiguration detected in code
Rule Details
Impact
How to Fix
IAM policy defines public access misconfiguration detected in code
Rule Details
Impact
How to Fix
Basic roles utilized at the organization level misconfiguration detected in code
Rule Details
Impact
How to Fix
Basic roles used at the folder level misconfiguration detected in code
Rule Details
Impact
How to Fix
Project level utilization of basic roles misconfiguration detected in code
Rule Details
Impact
How to Fix
IAM workload identity pool provider is not restricted misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP GitHub Actions OIDC trust policy is insecurely configured misconfiguration detected in code
Rule Details
Impact
How to Fix
GitHub pull request configurations defined in Terraform have less than 2 approvals misconfiguration detected in code
Rule Details
Impact
How to Fix
GitHub repository defined in Terraform does not have GPG signatures for all commits misconfiguration detected in code
Rule Details
Impact
How to Fix
Gitlab project defined in Terraform requires fewer than 2 approvals misconfiguration detected in code
Rule Details
Impact
How to Fix
Gitlab branch protection rules defined in Terraform allow force push misconfiguration detected in code
Rule Details
Impact
How to Fix
Gitlab project defined in Terraform does not require signed commits misconfiguration detected in code
Rule Details
Impact
How to Fix
Containers run with AllowPrivilegeEscalation based on Pod Security Policy setting misconfiguration detected in code
Rule Details
Impact
How to Fix
Secrets used as environment variables misconfiguration detected in code
Rule Details
Impact
How to Fix
Service account tokens are not mounted where necessary misconfiguration detected in code
Rule Details
Impact
How to Fix
Default service accounts are actively used misconfiguration detected in code
Rule Details
Impact
How to Fix
Default Kubernetes service accounts are actively used by bounding to a role or cluster role misconfiguration detected in code
Rule Details
Impact
How to Fix
Wildcard use is not minimized in Roles and ClusterRoles misconfiguration detected in code
Rule Details
Impact
How to Fix
The --anonymous-auth argument is not set to False for API server misconfiguration detected in code
Rule Details
Impact
How to Fix
The --basic-auth-file argument is Set misconfiguration detected in code
Rule Details
Impact
How to Fix
The --token-auth-file argument is Set misconfiguration detected in code
Rule Details
Impact
How to Fix
The --kubelet-client-certificate and --kubelet-client-key arguments are not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
The --kubelet-certificate-authority argument is not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
The --authorization-mode argument is set to AlwaysAllow for Kubelet misconfiguration detected in code
Rule Details
Impact
How to Fix
The --authorization-mode argument does not include node misconfiguration detected in code
Rule Details
Impact
How to Fix
The --authorization-mode argument does not include RBAC misconfiguration detected in code
Rule Details
Impact
How to Fix
The admission control plugin SecurityContextDeny is set if PodSecurityPolicy is used misconfiguration detected in code
Rule Details
Impact
How to Fix
The admission control plugin ServiceAccount is not set misconfiguration detected in code
Rule Details
Impact
How to Fix
The admission control plugin PodSecurityPolicy is not set misconfiguration detected in code
Rule Details
Impact
How to Fix
The admission control plugin NodeRestriction is not set misconfiguration detected in code
Rule Details
Impact
How to Fix
The --service-account-lookup argument is not set to true misconfiguration detected in code
Rule Details
Impact
How to Fix
The --service-account-key-file argument is not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
The --etcd-cafile argument is not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
The --use-service-account-credentials argument for controller managers is not set to True misconfiguration detected in code
Rule Details
Impact
How to Fix
The --service-account-private-key-file argument for controller managers is not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
The --root-ca-file argument for controller managers is not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
The RotateKubeletServerCertificate argument for controller managers is not set to True misconfiguration detected in code
Rule Details
Impact
How to Fix
The --client-cert-auth argument is not set to True misconfiguration detected in code
Rule Details
Impact
How to Fix
The --peer-client-cert-auth argument is not set to True misconfiguration detected in code
Rule Details
Impact
How to Fix
The --anonymous-auth argument is not set to False for Kubelet misconfiguration detected in code
Rule Details
Impact
How to Fix
The --authorization-mode argument is set to AlwaysAllow for API server misconfiguration detected in code
Rule Details
Impact
How to Fix
The --client-ca-file argument for API Servers is not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
The --rotate-certificates argument is set to false misconfiguration detected in code
Rule Details
Impact
How to Fix
Kubernetes ClusterRoles that grant control over validating or mutating admission webhook configurations are not minimized misconfiguration detected in code
Rule Details
Impact
How to Fix
Kubernetes ClusterRoles that grant permissions to approve CertificateSigningRequests are not minimized misconfiguration detected in code
Rule Details
Impact
How to Fix
Kubernetes Roles and ClusterRoles that grant permissions to bind RoleBindings or ClusterRoleBindings are not minimized misconfiguration detected in code
Rule Details
Impact
How to Fix
Kubernetes Roles and ClusterRoles that grant permissions to escalate Roles or ClusterRole are not minimized misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI private keys are hard coded in the provider misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI IAM password policy for local (non-federated) users does not have a lowercase character misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI IAM password policy for local (non-federated) users does not have a number misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI IAM password policy for local (non-federated) users does not have a symbol misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI IAM password policy for local (non-federated) users does not have an uppercase character misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI IAM password policy for local (non-federated) users does not have minimum 14 characters misconfiguration detected in code
Rule Details
Impact
How to Fix
OpenAPI Security object needs to have defined rules in its array and rules should be defined in the securityScheme misconfiguration detected in code
Rule Details
Impact
How to Fix
OpenAPI Security object for operations, if defined, must define a security scheme, otherwise it should be considered an error misconfiguration detected in code
Rule Details
Impact
How to Fix
OpenAPI Security requirement not defined in the security definitions misconfiguration detected in code
Rule Details
Impact
How to Fix
API spec includes a 'password' flow in OAuth2 authentication misconfiguration detected in code
Rule Details
Impact
How to Fix
Security scopes of operations are not defined in securityDefinition misconfiguration detected in code
Rule Details
Impact
How to Fix
OAuth2 security definitions includes password flow in OpenAPI 2.0 file misconfiguration detected in code
Rule Details
Impact
How to Fix
OAuth2 password flow in security definitions for OpenAPI 2.0 file misconfiguration detected in code
Rule Details
Impact
How to Fix
Security definition uses the deprecated implicit flow on OAuth2 misconfiguration detected in code
Rule Details
Impact
How to Fix
Security definitions uses basic auth misconfiguration detected in code
Rule Details
Impact
How to Fix
Operation Objects Uses 'Implicit' Flow misconfiguration detected in code
Rule Details
Impact
How to Fix
Operation Objects Uses Basic Auth misconfiguration detected in code
Rule Details
Impact
How to Fix
The global security scope is not defined in the securityDefinitions misconfiguration detected in code
Rule Details
Impact
How to Fix
OpenStack hard coded password, token, or application_credential_secret exists in provider misconfiguration detected in code
Rule Details
Impact
How to Fix
OpenStack instance use basic credentials misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM group not in use misconfiguration detected in code
Rule Details
Impact
How to Fix
Not all IAM users are members of at least one IAM group misconfiguration detected in code
Rule Details
Impact
How to Fix
IAM User has access to the console misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS IAM policy allows full administrative privileges misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EC2 Instance IAM Role not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS S3 buckets are accessible to any authenticated user misconfiguration detected in code
Rule Details
Impact
Fix - Buidtime
AWS Cloudfront Distribution with S3 have Origin Access set to disabled misconfiguration detected in code
Rule Details
Impact
Fix - Buidtime
AWS OpenSearch Fine-grained access control is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
The AWS Managed IAMFullAccess IAM policy should not be used misconfiguration detected in code
Rule Details
Impact
How to Fix
A Policy is not Defined for KMS Key misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS API Gateway method lacking authorization or API keys misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL servers which doesn't have Azure Active Directory admin configured misconfiguration detected in code
Rule Details
Impact
Azure SQL server not configured with Active Directory admin authentication misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Container Instance not configured with the managed identity misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Recovery Services vault is not configured with managed identity misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Automation account is not configured with managed identity misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Storage account configured with Shared Key authorization misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Storage account not configured with SAS expiration policy misconfiguration detected in code
Rule Details
Impact
How to Fix
Anonymous blob access configured in Azure storage account misconfiguration detected in code
Rule Details
Impact
How to Fix
chpasswd' is used to set or remove passwords misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine Cluster Nodes have default Service account for Project access misconfiguration detected in code
Rule Details
Impact
How to Fix
There are not only GCP-managed service account keys for each service account misconfiguration detected in code
Rule Details
Impact
How to Fix
A MySQL database instance allows anyone to connect with administrative privileges misconfiguration detected in code
Rule Details
Impact
How to Fix
IBM Cloud API key creation is not restricted in account settings in Terraform misconfiguration detected in code
Rule Details
Impact
How to Fix
IBM Cloud Multi-Factor Authentication (MFA) not enabled at the account level in Terraform misconfiguration detected in code
Rule Details
Impact
How to Fix
IBM Cloud Service ID creation is not restricted in account settings in Terraform misconfiguration detected in code
Rule Details
Impact
How to Fix
RoleBinding should not allow privilege escalation to a ServiceAccount or Node on other RoleBinding misconfiguration detected in code
Rule Details
Impact
How to Fix
Granting create permissions to nodes/proxy or pods/exec sub resources allows potential privilege escalation misconfiguration detected in code
Rule Details
Impact
How to Fix
No ServiceAccount/Node should have impersonate permissions for groups/users/service-accounts misconfiguration detected in code
Rule Details
Impact
How to Fix
ServiceAccounts and nodes that can modify services/status may set the status.loadBalancer.ingress.ip field to exploit the unfixed CVE-2020-8554 and launch MiTM attacks against the cluster misconfiguration detected in code
Rule Details
Impact
How to Fix
No ServiceAccount/Node should be able to read all secrets misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI tenancy administrator users are associated with API keys misconfiguration detected in code
Rule Details
Impact
How to Fix
Logging
Alibaba Cloud Action Trail Logging is not enabled for all regions misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud Action Trail Logging is not enabled for all events misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud OSS bucket has access logging enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud RDS Instance SQL Collector Retention Period is less than 180 misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud RDS instance does not have log_duration enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud RDS instance has log_disconnections disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud RDS log audit is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudTrail log validation is not enabled in all regions misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EKS control plane logging disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Amazon MQ Broker logging is not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudWatch Log groups not configured with definite retention days misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudTrail is not enabled with multi trail and not capturing all management events misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Redshift database does not have audit logging enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Global Accelerator does not have Flow logs enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
API Gateway does not have access logging enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Amazon MSK cluster logging is not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elasticsearch domain logging is not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS DocumentDB logging is not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudFront distribution with access logging disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elastic Load Balancer v2 (ELBv2) with access log disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elastic Load Balancer (Classic) with access log disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS API Gateway V2 has Access Logging is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Neptune logging is not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS config is not enabled in all regions misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudWatch Log groups encrypted using default encryption key instead of KMS CMK misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS WAF Web Access Control Lists logging is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS AppSync's logging is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS AppSync has field-level logging disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS MQBroker audit logging is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS ECS Cluster does not enable logging of ECS Exec misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS cluster logging is not enabled or client to container communication not encrypted using a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS ACM certificates does not have logging preference misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS MWAA environment has scheduler logs disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS MWAA environment has worker logs disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS MWAA environment has webserver logs disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudTrail logging is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudTrail does not define an SNS Topic misconfiguration detected in code
Rule Details
Impact
How to Fix
Data Trace is not enabled in the API Gateway Method Settings misconfiguration detected in code
Rule Details
Impact
How to Fix
State machine does not have X-ray tracing enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Execution history logging is not enabled on the State Machine misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CodeBuild project not configured with logging configuration misconfiguration detected in code
Rule Details
Impact
How to Fix
Elasticsearch Domain Audit Logging is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
RDS Cluster log capture is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
RDS Cluster audit logging for MySQL engine is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS ECS services have automatic public IP address assignment enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudWatch log groups retention set to less than 365 days misconfiguration detected in code
Rule Details
Impact
How to Fix
RDS instances have performance insights disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Network Watcher Network Security Group (NSG) flow logs retention is less than 90 days misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL Server auditing policy is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL Server audit log retention is not greater than 90 days misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL server send alerts to field value is not set misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure storage account logging for queues is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Activity Log retention should not be set to less than 365 days misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Monitor log profile does not capture all activities misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App service HTTP logging is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
App service disables detailed error messages misconfiguration detected in code
Rule Details
Impact
How to Fix
App service does not enable failed request tracing misconfiguration detected in code
Rule Details
Impact
How to Fix
Server Parameter 'log_retention' is Set to 'OFF' for PostgreSQL Database Server misconfiguration detected in code
Rule Details
How to Fix
Azure SQL Server does not have default auditing policy configured misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Built-in logging for Azure function app is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Ledger feature is disabled on the database misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine Clusters have Cloud Logging disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP VPC Flow logs for the subnet is set to Off misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP PostgreSQL instance with log_checkpoints database flag is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP PostgreSQL instance database flag log_connections is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP PostgreSQL instance database flag log_disconnections is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP PostgreSQL instance database flag log_lock_waits is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP PostgreSQL instance database flag log_min_messages is not set misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP PostgreSQL instance database flag log_temp_files is not set to 0 misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP PostgreSQL instance database flag log_min_duration_statement is not set to -1 misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP PostgreSQL instance database flag log_hostname is not set to off misconfiguration detected in code
Rule Details
Impact
How to Fix
Log levels of the GCP PostgreSQL database are not set to ERROR or lower misconfiguration detected in code
Rule Details
Impact
How to Fix
pgAudit is disabled for your GCP PostgreSQL database misconfiguration detected in code
Rule Details
Impact
How to Fix
SQL statements of GCP PostgreSQL are not logged misconfiguration detected in code
Rule Details
Impact
How to Fix
The --audit-log-path argument is not set misconfiguration detected in code
Rule Details
Impact
How to Fix
The --audit-log-maxage argument is not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
The --audit-log-maxbackup argument is not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
The --audit-log-maxsize argument is not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
Security policies missing descriptions in Palo Alto Networks devices misconfiguration detected in code
Rule Details
Impact
How to Fix
Log Forwarding Profile not selected for a Palo Alto Networks device security policy rule misconfiguration detected in code
Rule Details
Impact
How to Fix
End-of-session logging disabled on Palo Alto Networks security policies misconfiguration detected in code
Rule Details
Impact
How to Fix
Logging at session start enabled on Palo Alto Networks devices misconfiguration detected in code
Rule Details
Impact
How to Fix
API Gateway stage does not have logging level defined appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudTrail trail logs is not integrated with CloudWatch Log misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS VPC Flow Logs not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS Postgres Cluster does not have query logging enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Postgres RDS have Query Logging disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS WAF2 does not have a Logging Configuration misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Codecommit is not associated with an approval rule misconfiguration detected in code
Rule Details
Impact
How to Fix
Domain Name System (DNS) query logging is not enabled for Amazon Route 53 hosted zones misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Config Recording is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Config must record all possible resources misconfiguration detected in code
Rule Details
Impact
How to Fix
An S3 bucket must have a lifecycle configuration misconfiguration detected in code
Rule Details
Impact
How to Fix
S3 buckets do not have event notifications enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Network Firewall is not configured with logging configuration misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure storage account logging setting for tables is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure storage account logging setting for blobs is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Log bucket retention policy is not configured using bucket lock misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Project audit logging is not configured properly across all services and all users in a project misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP PostgreSQL instance database flag log_duration is not set to on misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP PostgreSQL instance database flag log_executor_stats is not set to off misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP PostgreSQL instance database flag log_parser_stats is not set to off misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP PostgreSQL instance database flag log_planner_stats is not set to off misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP PostgreSQL instance database flag log_statement_stats is not set to off misconfiguration detected in code
Rule Details
Impact
How to Fix
Logging is disabled for Dialogflow agents misconfiguration detected in code
Rule Details
Impact
How to Fix
Logging for Dialogflow CX agents is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Logging for Dialogflow CX webhooks is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Monitoring
Alibaba Cloud Kubernetes node pools are not set to auto repair misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba RDS instance has log_connections disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS ECS cluster with container insights feature disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Amazon RDS instances Enhanced Monitoring is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudFormation stack configured without SNS topic misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EC2 instance detailed monitoring disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS WAF does not have associated rules misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS GuardDuty detector is not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Elastic Beanstalk environments do not have enhanced health reporting enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
CloudWatch alarm actions are not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
EKS clusters are not running on a supported Kubernetes version misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS resources that support tags do not have Tags misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure AKS cluster monitoring not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Microsoft Defender for Cloud Defender plans is set to Off misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Microsoft Defender for Cloud security contact phone number is not set misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Microsoft Defender for Cloud security alert email notification is not set misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Microsoft Defender for Cloud email notification for subscription owner is not set misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL Server threat detection alerts are not enabled for all threat types misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL Databases with disabled Email service and co-administrators for Threat Detection misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Microsoft Defender for Cloud is set to Off for Servers misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Microsoft Defender for Cloud is set to Off for App Service misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Microsoft Defender for Cloud is set to Off for Azure SQL Databases misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Microsoft Defender for Cloud is set to Off for SQL servers on machines misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Microsoft Defender for Cloud is set to Off for Storage misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Security Center Defender set to Off for Kubernetes misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Microsoft Defender for Cloud is set to Off for Container Registries misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Microsoft Defender for Cloud is set to Off for Key Vault misconfiguration detected in code
Rule Details
Impact
How to Fix
My SQL server does not enable Threat Detection policy misconfiguration detected in code
Rule Details
Impact
How to Fix
PostgreSQL server does not enable Threat Detection policy misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Microsoft Defender for Cloud security alert email notifications is not set misconfiguration detected in code
Rule Details
Impact
How to Fix
Vulnerability Scanning not enabled for Azure Container Registry misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App Service Health Check Missing misconfiguration detected in code
Rule Details
How to Fix
Azure Microsoft Defender for Cloud set to Off for Resource Manager misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure resources that support tags do not have tags misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine Clusters have Cloud Monitoring disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes cluster node auto-repair configuration disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes cluster node auto-upgrade configuration disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine Clusters without any label information misconfiguration detected in code
Rule Details
Impact
How to Fix
The GKE metadata server is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine cluster not using Release Channel for version management misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes cluster shielded GKE node with integrity monitoring disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Cloud Armor policy not configured with cve-canary rule misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP resources that support labels do not have labels misconfiguration detected in code
Rule Details
Impact
How to Fix
GitHub Repository defined in Terraform doesn't have vulnerability alerts enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Liveness probe is not configured misconfiguration detected in code
Rule Details
Impact
How to Fix
Readiness probe is not configured misconfiguration detected in code
Rule Details
Impact
How to Fix
The --profiling argument is not set to false for API server misconfiguration detected in code
Rule Details
Impact
How to Fix
The --request-timeout argument is not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
The --profiling argument for controller managers is not set to False misconfiguration detected in code
Rule Details
Impact
How to Fix
The --profiling argument is not set to False for scheduler misconfiguration detected in code
Rule Details
Impact
How to Fix
The --event-qps argument is not set to a level that ensures appropriate event capture misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Compute Instance has monitoring disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Terraform module sources do not use a git url with a commit hash revision misconfiguration detected in code
Rule Details
Impact
How to Fix
Terraform module sources do not use a git url with a tag or commit hash revision misconfiguration detected in code
Rule Details
Impact
How to Fix
GuardDuty is not enabled to specific org/region misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudFront attached WAFv2 WebACL is not configured with AMR for Log4j Vulnerability misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS instance with copy tags to snapshots disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL Server ADS Vulnerability Assessment is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL Server ADS Vulnerability Assessment (VA) Periodic recurring scans is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL Server ADS Vulnerability Assessment (VA) 'Send scan reports to' is not configured misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL Server ADS Vulnerability Assessment (VA) 'Also send email notifications to admins and subscription owners' is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL server Defender setting is set to Off misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP GCR Container Vulnerability Scanning is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Networking
Alibaba Cloud Kubernetes does not install plugin Terway or Flannel to support standard policies misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud Cypher Policy is not secured misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud MongoDB is not deployed inside a VPC misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EKS cluster security group overly permissive to all traffic misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudFront web distribution with AWS Web Application Firewall (AWS WAF) service disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EKS node group have implicit SSH access from 0.0.0.0/0 misconfiguration detected in code
Rule Details
Impact
How to Fix
Deletion protection disabled for load balancer misconfiguration detected in code
Rule Details
Impact
How to Fix
VPC endpoint service is not configured for manual acceptance misconfiguration detected in code
Rule Details
Impact
How to Fix
Elastic load balancers do not use SSL Certificates provided by AWS Certificate Manager misconfiguration detected in code
Rule Details
Impact
How to Fix
ALB does not drop HTTP headers misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elastic Load Balancer (Classic) with cross-zone load balancing disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Default VPC is planned to be provisioned misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elastic Load Balancer v2 with deletion protection feature disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elastic Load Balancer v2 (ELBv2) with cross-zone load balancing disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
WAF enables message lookup in Log4j2 misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS security groups are not defined misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS ELB Policy uses some unsecure protocols misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Cloudfront distribution is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elasticsearch uses the default security group misconfiguration detected in code
Rule Details
Impact
ALB is not configured with the defensive or strictest desync mitigation mode misconfiguration detected in code
Rule Details
Impact
How to Fix
Network firewalls do not have deletion protection enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Transfer server does not force secure protocols. misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudFront web distribution with geo restriction disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Route 53 domains do not have transfer lock protection misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure AKS cluster network policies are not enforced misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure RDP Internet access is not restricted misconfiguration detected in code
Rule Details
How to Fix
CORS allows resources to access function apps misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Function App doesn't use HTTP 2.0 misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App Services Remote debugging is enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure container container group is not deployed into a virtual network misconfiguration detected in code
Rule Details
Impact
How to Fix
API management services do not use virtual networks misconfiguration detected in code
Rule Details
Impact
How to Fix
Key vault does not allow firewall rules settings misconfiguration detected in code
Rule Details
Impact
How to Fix
AKS is not enabled for private clusters misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure application gateway does not have WAF enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Front Door does not have the Azure Web application firewall (WAF) enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Application gateway does not use WAF in Detection or Prevention modes misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure front door does not use WAF in Detection or Prevention modes misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Front Door Web application firewall (WAF) policy rule for Remote Command Execution is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Application Gateway Web application firewall (WAF) policy rule for Remote Command Execution is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Firewall policy does not have IDPS mode set to deny misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Container Registry dedicated data endpoint is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Batch Account configured with overly permissive network access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Storage Sync Service configured with overly permissive network access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure VM disk configured with public network access misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine Clusters have Network policy disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine Clusters have Master authorized networks disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine Clusters have Alias IP disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine private cluster has private endpoint disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes cluster intra-node visibility disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Kubernetes Engine Clusters not configured with private nodes feature misconfiguration detected in code
Rule Details
Impact
How to Fix
Containers wishing to share host network namespace admitted misconfiguration detected in code
Rule Details
Impact
How to Fix
Containers share the host network namespace misconfiguration detected in code
Rule Details
Impact
How to Fix
hostPort is specified misconfiguration detected in code
Rule Details
Impact
How to Fix
The --kubelet-https argument is not set to True misconfiguration detected in code
Rule Details
Impact
How to Fix
The API server does not make use of strong cryptographic ciphers misconfiguration detected in code
Rule Details
Impact
How to Fix
The --bind-address argument for controller managers is not set to 127.0.0.1 misconfiguration detected in code
Rule Details
Impact
How to Fix
The --bind-address argument is not set to 127.0.0.1 misconfiguration detected in code
Rule Details
Impact
How to Fix
The --auto-tls argument is set to True misconfiguration detected in code
Rule Details
Impact
How to Fix
The --make-iptables-util-chains argument is not set to True misconfiguration detected in code
Rule Details
Impact
How to Fix
The --tls-cert-file and --tls-private-key-file arguments for Kubelet are not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
Kubelet does not use strong cryptographic ciphers misconfiguration detected in code
Rule Details
Impact
How to Fix
NGINX Ingress annotation snippets contains LUA code execution misconfiguration detected in code
Rule Details
Impact
How to Fix
NGINX Ingress has annotation snippets misconfiguration detected in code
Rule Details
Impact
How to Fix
NGINX Ingress has annotation snippets which contain alias statements misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Network Security Groups (NSG) has stateful security rules misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Data Catalog configured with overly permissive network access misconfiguration detected in code
Rule Details
Impact
How to Fix
OpenStack firewall rule does not have destination IP configured misconfiguration detected in code
Rule Details
Impact
How to Fix
Plain-text management HTTP enabled for Interface Management Profile in Palo Alto Networks devices misconfiguration detected in code
Rule Details
Impact
How to Fix
Plain-text management Telnet enabled for Interface Management Profile in Palo Alto Networks devices misconfiguration detected in code
Rule Details
Impact
How to Fix
Disable Server Response Inspection (DSRI) enabled in security policies for Palo Alto Networks devices misconfiguration detected in code
Rule Details
Impact
How to Fix
Security rule allows any application on Palo Alto Networks devices misconfiguration detected in code
Rule Details
Impact
How to Fix
Security rule permits any service on Palo Alto Networks devices misconfiguration detected in code
Rule Details
Impact
How to Fix
Security Rule in Palo Alto Networks devices with overly broad Source and Destination IPs misconfiguration detected in code
Rule Details
Impact
How to Fix
IPsec profile uses insecure authentication algorithms on Palo Alto Networks devices misconfiguration detected in code
Rule Details
Impact
How to Fix
IPsec profile uses insecure authentication protocols on Palo Alto Networks devices misconfiguration detected in code
Rule Details
Impact
How to Fix
Security zone on Palo Alto Networks devices does not have an associated Zone Protection Profile misconfiguration detected in code
Rule Details
Impact
How to Fix
Include ACL (Access Control List) not defined for a security zone in Palo Alto Networks devices with User-ID enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Security rules apply to all zones on Palo Alto Networks devices misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS AppSync is not protected by WAF misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS NAT Gateways are not utilized for the default route misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS ACM Certificate with wildcard domain name misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Load Balancers do not use strong ciphers misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Lambda function URL having overly permissive cross-origin resource sharing permissions misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Automation account configured with overly permissive network access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure MySQL Flexible Server not configured with private endpoint misconfiguration detected in code
Rule Details
Impact
How to Fix
PostgreSQL Flexible Server not configured with private endpoint misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP project is configured with legacy network misconfiguration detected in code
Rule Details
Impact
How to Fix
Vertex AI workbench instances are not private misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP public-facing (external) regional load balancer using HTTP protocol misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP public-facing (external) global load balancer using HTTP protocol misconfiguration detected in code
Rule Details
Impact
How to Fix
IBM Cloud Virtual Private Cloud (VPC) classic access is enabled in Terraform misconfiguration detected in code
Rule Details
Impact
How to Fix
Public Exposure
Alibaba Cloud OSS bucket accessible to public misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud Security group allow internet traffic to SSH port (22) misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud Security group allow internet traffic to RDP port (3389) misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud database instance accessible to public misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud RDS instance does not use SSL misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud API Gateway API Protocol does not use HTTPS misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba cloud ALB ACL does not restrict public access misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud Mongodb instance does not use SSL misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud MongoDB instance is public misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elastic Load Balancer v2 (ELBv2) listener that allow connection requests over HTTP misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elasticsearch does not have node-to-node encryption enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS database instance is publicly accessible misconfiguration detected in code
Rule Details
Impact
How to Fix
Not every Security Group rule has a description misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Security Group allows all traffic on SSH port (22) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Security Group allows all traffic on RDP port (3389) misconfiguration detected in code
Rule Details
How to Fix
AWS ElastiCache Redis cluster with in-transit encryption disabled (Replication group) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS ElastiCache Redis cluster with Redis AUTH feature disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudFront viewer protocol policy is not configured with HTTPS misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EKS cluster endpoint access publicly enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS access keys and secrets are hard coded in infrastructure misconfiguration detected in code
Rule Details
Impact
How to Fix
Lambda function's environment variables expose secrets misconfiguration detected in code
Rule Details
Impact
How to Fix
EC2 user data exposes secrets misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS API gateway methods are publicly accessible misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS MQ is publicly accessible misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elasticsearch domain is not configured with HTTPS misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Redshift cluster instance with public access setting enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EC2 instances with public IP and associated with security groups have Internet access misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS DMS replication instance is publicly accessible misconfiguration detected in code
Rule Details
Impact
How to Fix
Neptune cluster instance is publicly available misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Load Balancer is not using TLS 1.2 misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS VPC subnets should not allow automatic public IP assignment misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elasticsearch is not configured inside a VPC misconfiguration detected in code
Rule Details
Impact
How to Fix
Redshift is deployed outside of a VPC misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Transfer Server is publicly exposed misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudFront web distribution using insecure TLS version misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elasticache security groups are not defined misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS API Gateway Domain does not use a modern security policy misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Cloudsearch does not use the latest (Transport Layer Security) TLS misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Cloudsearch does not use HTTPs misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elasticsearch domain does not use an updated TLS policy misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS NACL allows ingress from 0.0.0.0/0 to port 21 misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS NACL allows ingress from 0.0.0.0/0 to port 20 misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS NACL allows ingress from 0.0.0.0/0 to port 3389 misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS NACL allows ingress from 0.0.0.0/0 to port 22 misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS DAX cluster endpoint does not use TLS (Transport Layer Security) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudFront response header policy does not enforce Strict Transport Security misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS security groups allow ingress from 0.0.0.0/0 to port 80 misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Security Group allows all traffic on all ports misconfiguration detected in code
Rule Details
Impact
How to Fix
MSK nodes are not private misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS snapshots are accessible to public misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS SSM documents are public misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudFront distributions does not have a default root object configured misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS SageMaker notebook instance is not placed in VPC misconfiguration detected in code
Rule Details
Impact
How to Fix
CloudFront distributions do not have origin failover configured misconfiguration detected in code
Rule Details
Impact
How to Fix
ElastiCache cluster is using the default subnet group misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Transit Gateway auto accept vpc attachment is enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
WAF rule does not have any actions misconfiguration detected in code
Rule Details
Impact
How to Fix
NACL ingress allows all ports misconfiguration detected in code
Rule Details
Impact
How to Fix
TLS not enforced in SES configuration set misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elastic Load Balancer with listener TLS/SSL is not configured misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Load Balancer uses HTTP protocol misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS S3 bucket not configured with secure data transport policy misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Transfer Server not using latest Security Policy misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Virtual Machine (Linux) does not authenticate using SSH keys misconfiguration detected in code
Rule Details
Impact
How to Fix
Kubernetes dashboard is not disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Network Security Group allows all traffic on SSH port 22 misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL Servers Firewall rule allow ingress access from 0.0.0.0/0 misconfiguration detected in code
Rule Details
How to Fix
Azure App Service Web app doesn't redirect HTTP to HTTPS misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App Service Web app doesn't use latest TLS version misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App Service Web app client certificate is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App Service Web app doesn't use HTTP 2.0 misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure MySQL Database Server SSL connection is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure PostgreSQL database server with SSL connection disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure storage account has a blob container that is publicly accessible misconfiguration detected in code
Rule Details
How to Fix
Azure Storage Account default network access is set to 'Allow' misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure MariaDB database server with SSL connection disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
MariaDB servers do not have public network access enabled set to False misconfiguration detected in code
Rule Details
Impact
How to Fix
public network access enabled' is not set to 'False' for mySQL servers misconfiguration detected in code
Rule Details
Impact
How to Fix
MySQL is not using the latest version of TLS encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
CORS allows resource to access app services misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure storage account does allow public access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure file sync enables public network access misconfiguration detected in code
Rule Details
Impact
How to Fix
PostgreSQL server does not disable public network access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Function App doesn't redirect HTTP to HTTPS misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Network Security Group having Inbound rule overly permissive to all traffic on UDP protocol misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App Services FTP deployment is All allowed misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure cache for Redis has public network access enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Cosmos DB accounts do not have restricted access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Cosmos DB enables public network access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Data Factory (V2) configured with overly permissive network access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Event Grid domain public network access is enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure IoT Hub enables public network access misconfiguration detected in code
Rule Details
Impact
How to Fix
SQL Server is enabled for public network access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Virtual machine NIC has IP forwarding enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Network interfaces use public IPs misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure cognitive search does not disable public network access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Container registries Public access to All networks is enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure AKS cluster nodes have public IP addresses misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Function App doesn't use latest TLS version misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Redis Cache does not use the latest version of TLS encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Client Certificates are not enforced for API management misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure web app does not redirect all HTTP traffic to HTTPS in Azure App Service Slot misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App's service slot does not use the latest version of TLS encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App service slot does not have debugging disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure HTTP (port 80) access from the internet is not restricted misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Spring Cloud API Portal is not enabled for HTTPS misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Spring Cloud API Portal Public Access Is Enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
API Management Without Minimum TLS 1.2 misconfiguration detected in code
Rule Details
Impact
How to Fix
API Management with Public Access misconfiguration detected in code
Rule Details
How to Fix
Web PubSub Without SLA SKU misconfiguration detected in code
Rule Details
Impact
How to Fix
VNET With Only One DNS Endpoint misconfiguration detected in code
Rule Details
Impact
How to Fix
VNET Using External DNS Addresses misconfiguration detected in code
Rule Details
How to Fix
App Configuration Public Access Enabled misconfiguration detected in code
Rule Details
How to Fix
Azure Key Vault Public Network Access Control misconfiguration detected in code
Rule Details
How to Fix
Azure storage account has a blob container with public access misconfiguration detected in code
Rule Details
How to Fix
Azure Event Grid Topic Public Network Access misconfiguration detected in code
Rule Details
How to Fix
Azure SignalR Service not Using Paid SKU for its SLA misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure CDN Doesn't Disable HTTP Endpoint misconfiguration detected in code
Rule Details
How to Fix
Azure CDN Endpoint Custom domains is not configured with HTTPS misconfiguration detected in code
Rule Details
How to Fix
Azure CDN Using Outdated TLS Encryption misconfiguration detected in code
Rule Details
How to Fix
Azure Service Bus with Public Network Access Enabled misconfiguration detected in code
Rule Details
How to Fix
Azure Service Bus Without Latest TLS Encryption misconfiguration detected in code
Rule Details
How to Fix
Azure Cognitive Search With Global IP Allowance misconfiguration detected in code
Rule Details
How to Fix
Azure App Service Instance Lacks Redundancy misconfiguration detected in code
Rule Details
Impact
How to Fix
Backend of the API management system does not utilize HTTPS misconfiguration detected in code
Rule Details
Impact
How to Fix
DenyIntelMode for Azure Firewalls is not set to Deny misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Application gateways listener that allow connection requests over HTTP misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Application Gateway is configured with SSL policy having TLS version 1.1 or lower misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Firewall does not define a firewall policy misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Function app configured with public network access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure App Service web apps with public network access misconfiguration detected in code
Rule Details
Impact
How to Fix
Event Hub Namespace not using TLS 1.2 or greater misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Container Instance environment variable with regular value type misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Container Instance is not configured with virtual network misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure AKS cluster HTTP application routing enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Port 22 is exposed misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Firewall rule allows all traffic on SSH port (22) misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Firewall rule allows all traffic on RDP port (3389) misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP HTTPS Load balancer is set with SSL policy having TLS version 1.1 or lower misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP SQL Instances do not have SSL configured for incoming connections misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP SQL database is publicly accessible misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP BigQuery dataset is publicly accessible misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Cloud DNS has DNSSEC disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
RSASHA1 is used for Zone-Signing and Key-Signing Keys in Cloud DNS DNSSEC misconfiguration detected in code
Rule Details
Impact
How to Fix
GKE control plane is public misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP project is using the default network misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Storage bucket is anonymously or publicly accessible misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP VM instances do have block project-wide SSH keys feature disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Projects do have OS Login disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Projects have OS Login disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP VM instances have serial port access enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP VM instances have IP Forwarding enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP VM instance with Shielded VM features disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP VM instance with the external IP address misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Cloud SQL database instances have public IPs misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP VPC Network subnets have Private Google access disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Firewall rule allows all traffic on FTP port (21) misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP VPC Network subnets have Private Google access for IPv6 disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Google compute firewall ingress allow FTP port (20) access misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP cloud build workers are not private misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP data fusion instances are not private misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Firewall rule allows all traffic on MySQL DB port (3306) misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Vertex AI instances are not private misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Dataflow jobs are not private misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Dataproc clusters are anonymously or publicly accessible misconfiguration detected in code
Rule Details
How to Fix
GCP Pub/Sub Topics are anonymously or publicly accessible misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP BigQuery Tables are anonymously or publicly accessible misconfiguration detected in code
Rule Details
How to Fix
GCP Artifact Registry repositories are anonymously or publicly accessible misconfiguration detected in code
Rule Details
How to Fix
GCP Cloud Run services are anonymously or publicly accessible misconfiguration detected in code
Rule Details
How to Fix
GCP Firewall rule allows all traffic on HTTP port (80) misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Cloud Function is publicly accessible misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Storage buckets are publicly accessible to all users misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Cloud Function configured with overly permissive Ingress setting misconfiguration detected in code
Rule Details
Impact
How to Fix
GitHub repository webhook defined in Terraform does not use a secure SSL misconfiguration detected in code
Rule Details
Impact
How to Fix
Tiller (Helm V2) deployment is accessible from within the cluster misconfiguration detected in code
Rule Details
Impact
How to Fix
The --insecure-bind-address argument is set misconfiguration detected in code
Rule Details
Impact
How to Fix
The --insecure-port argument is not set to 0 misconfiguration detected in code
Rule Details
Impact
How to Fix
The --secure-port argument is set to 0 misconfiguration detected in code
Rule Details
Impact
How to Fix
The --tls-cert-file and --tls-private-key-file arguments for API server are not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
The --read-only-port argument is not set to 0 misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI VCN has no inbound security list misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI VCN Security list has stateful security rules misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Security List allows all traffic on SSH port (22) misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI security lists allows unrestricted ingress access to port 3389 misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI security group allows unrestricted ingress access to port 22 misconfiguration detected in code
Rule Details
Impact
How to Fix
OpenAPI Security Definitions Object should be set and not empty misconfiguration detected in code
Rule Details
Impact
How to Fix
OpenAPI If the security scheme is not of type 'oauth2', the array value must be empty misconfiguration detected in code
Rule Details
Impact
How to Fix
Cleartext credentials over unencrypted channel should not be accepted for the operation misconfiguration detected in code
Rule Details
Impact
How to Fix
The path scheme is supports unencrypted HTTP connections misconfiguration detected in code
Rule Details
Impact
How to Fix
Global schemes use 'httpa' protocol instead of 'https' misconfiguration detected in code
Rule Details
Impact
How to Fix
API keys transmitted over cleartext misconfiguration detected in code
Rule Details
Impact
How to Fix
OpenStack Security groups allow ingress from 0.0.0.0:0 to port 22 (tcp / udp) misconfiguration detected in code
Rule Details
Impact
How to Fix
OpenStack Security groups allow ingress from 0.0.0.0:0 to port 3389 (tcp / udp) misconfiguration detected in code
Rule Details
Impact
How to Fix
HTTPS url not used with Ansible uri misconfiguration detected in code
Rule Details
Impact
How to Fix
HTTPS url not used with Ansible get_url module misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Network ACL is not in use misconfiguration detected in code
Rule Details
Impact
How to Fix
Security Groups are not attached to EC2 instances or ENIs misconfiguration detected in code
Rule Details
Impact
How to Fix
S3 Bucket does not have public access blocks misconfiguration detected in code
Rule Details
Impact
How to Fix
Amazon EMR clusters' security groups are open to the world misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Default Security Group does not restrict all traffic misconfiguration detected in code
Rule Details
Impact
How to Fix
Auto scaling groups associated with a load balancer do not use elastic load balancing health checks misconfiguration detected in code
Rule Details
Impact
How to Fix
Not all EIP addresses allocated to a VPC are attached to EC2 instances misconfiguration detected in code
Rule Details
Impact
How to Fix
ALB does not redirect HTTP requests into HTTPS ones misconfiguration detected in code
Rule Details
Impact
How to Fix
Route53 A Record does not have Attached Resource misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Application Load Balancer (ALB) not configured with AWS Web Application Firewall v2 (AWS WAFv2) misconfiguration detected in code
Rule Details
Impact
How to Fix
Public API gateway not configured with AWS Web Application Firewall v2 (AWS WAFv2) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudFront distribution does not have a strict security headers policy attached misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Terraform sends SSM secrets to untrusted domains over HTTP misconfiguration detected in code
Rule Details
Impact
How to Fix
Domain Name System Security Extensions (DNSSEC) signing is not enabled for Amazon Route 53 public hosted zones misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudFront web distribution with default SSL certificate misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS route table with VPC peering overly permissive to all traffic misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Database Migration Service endpoint do not have SSL configured misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS API Gateway endpoints without client certificate authentication misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS API gateway request parameter is not validated misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudFront distribution is using insecure SSL protocols for HTTPS communication misconfiguration detected in code
Rule Details
Impact
How to Fix
MWAA environment is publicly accessible misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudFront origin protocol policy does not enforce HTTPS-only misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure PostgreSQL Database Server 'Allow access to Azure services' enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Storage account container storing activity logs is publicly accessible misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Spring Cloud service is not configured with virtual network misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure PostgreSQL database flexible server configured with overly permissive network access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure ACR HTTPS not enabled for webhook misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure AKS cluster Azure CNI networking not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Virtual Network subnet is not configured with a Network Security Group misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Key vault Private endpoint connection is not configured misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Storage account is not configured with private endpoint connection misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL Server allow access to any Azure internal resources misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Virtual machine configured with public IP and serial console access misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure PostgreSQL servers not configured with private endpoint misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Database for MariaDB not configured with private endpoint misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Database for MySQL server not configured with private endpoint misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL Database server not configured with private endpoint misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Spring Cloud app end-to-end TLS is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP KMS crypto key is anonymously accessible misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Cloud KMS Key Rings are anonymously or publicly accessible misconfiguration detected in code
Rule Details
How to Fix
GCP Container Registry repositories are anonymously or publicly accessible misconfiguration detected in code
Rule Details
How to Fix
GCP Cloud Function HTTP trigger is not secured misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Firewall with Inbound rule overly permissive to All Traffic misconfiguration detected in code
Rule Details
Impact
How to Fix
Google Cloud Platform network is not ensured to define a firewall misconfiguration detected in code
Rule Details
Impact
How to Fix
TPU v2 VM is public misconfiguration detected in code
Rule Details
Impact
How to Fix
IBM Cloud Application Load Balancer for VPC has public access enabled in Terraform misconfiguration detected in code
Rule Details
Impact
How to Fix
IBM Cloud Kubernetes clusters are accessible by using public endpoint in Terraform misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Network Security Group allows all traffic on RDP port (3389) misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Kubernetes Engine Cluster endpoint is not configured with Network Security Groups misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Kubernetes Engine Cluster pod security policy not enforced misconfiguration detected in code
Rule Details
Impact
How to Fix
Storage
Alibaba Cloud OSS bucket is not encrypted with Customer Master Key misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud disk encryption is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud Disk is not encrypted with Customer Master Key misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud OSS bucket has versioning disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud OSS bucket has transfer Acceleration disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud Transparent Data Encryption is disabled on instance misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud launch template data disks are not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud MongoDB does not have transparent data encryption enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EBS volumes are not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elasticsearch domain Encryption for data at rest is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EC2 Auto Scaling Launch Configuration is not using encrypted EBS volumes misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS DB cluster encryption is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Access logging not enabled on S3 buckets misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS S3 buckets do not have server side encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS S3 bucket ACL grants READ permission to everyone misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS S3 Object Versioning is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS SNS topic has SSE disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS SQS Queue not configured with server side encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
DynamoDB PITR is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS ElastiCache Redis cluster with encryption for data at rest disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CloudTrail logs are not encrypted using Customer Master Keys (CMKs) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elastic File System (EFS) with encryption for data at rest is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Kinesis streams are not encrypted using Server Side Encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
Neptune storage is not securely encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS DAX cluster not configured with encryption at rest misconfiguration detected in code
Rule Details
Impact
How to Fix
ECR image tags are not immutable misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS S3 Bucket has the block public ACLs disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS S3 Bucket BlockPublicPolicy is not set to True misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS S3 bucket IgnorePublicAcls is not set to True misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS S3 bucket RestrictPublicBucket is not set to True misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS S3 Bucket has an ACL defined which allows public WRITE access misconfiguration detected in code
Rule Details
How to Fix
AWS EKS cluster does not have secrets encryption enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Redshift instances are not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS S3 bucket policy overly permissive to any principal misconfiguration detected in code
Rule Details
How to Fix
DocumentDB is not encrypted at rest misconfiguration detected in code
Rule Details
Impact
How to Fix
Athena Database is not encrypted at rest misconfiguration detected in code
Rule Details
Impact
How to Fix
CodeBuild project encryption is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS MSK cluster encryption in transit is not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Athena workgroup does not prevent disabling encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
DocDB TLS is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
S3 bucket policy allows lockout all but root user misconfiguration detected in code
Rule Details
Impact
How to Fix
Glue Data Catalog encryption is not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Not all data stored in Aurora is securely encrypted at rest misconfiguration detected in code
Rule Details
Impact
How to Fix
EFS volumes in ECS task definitions do not have encryption in transit enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Glue security configuration encryption is not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
DocDB does not have audit logs enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Redshift does not have require_ssl configured misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EBS volume region with encryption is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Session Manager data is not encrypted in transit misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS DynamoDB encrypted using AWS owned CMK instead of AWS managed CMK misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS instance without Automatic Backup setting misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS ElastiCache Redis cluster is not configured with automatic backup misconfiguration detected in code
Rule Details
Impact
How to Fix
EC2 EBS is not optimized misconfiguration detected in code
Rule Details
Impact
How to Fix
Unencrypted ECR repositories misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS cluster delete protection is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Unencrypted RDS global clusters misconfiguration detected in code
Rule Details
Impact
How to Fix
Redshift clusters version upgrade is not default misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Redshift Cluster not encrypted using Customer Managed Key misconfiguration detected in code
Rule Details
Impact
How to Fix
S3 bucket lock configuration disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
S3 bucket cross-region replication disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
S3 buckets are not encrypted with KMS misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS DB snapshot is not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
CodeBuild projects are not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Secrets Manager secret not encrypted by Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
Workspace user volumes are not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
Workspace root volumes are not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
RDS instances do not have Multi-AZ enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Athena Workgroup is not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
Timestream database is not encrypted with KMS CMK misconfiguration detected in code
Rule Details
Impact
How to Fix
Dynamodb point in time recovery is not enabled for global tables misconfiguration detected in code
Rule Details
Impact
How to Fix
Backup Vault is not encrypted at rest using KMS CMK misconfiguration detected in code
Rule Details
Impact
How to Fix
QLDB ledger permissions mode is not set to STANDARD misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EMR cluster is not configured with SSE KMS for data at rest encryption (Amazon S3 with EMRFS) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS QLDB ledger has deletion protection is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Lambda encryption settings environmental variable is not set properly misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Kinesis Video Stream not encrypted using Customer Managed Key misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS fx ontap file system not encrypted using Customer Managed Key misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS FSX Windows filesystem not encrypted using Customer Managed Key misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Image Builder component not encrypted using Customer Managed Key misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS S3 Object Copy not encrypted using Customer Managed Key misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Doc DB not encrypted using Customer Managed Key misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EBS Snapshot Copy not encrypted using Customer Managed Key misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elastic File System (EFS) is not encrypted using Customer Managed Key misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Kinesis streams encryption is using default KMS keys instead of Customer's Managed Master Keys misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS S3 bucket Object not encrypted using Customer Managed Key misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EBS Volume not encrypted using Customer Managed Key misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS lustre file system not configured with CMK key misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Elasticache replication group not configured with CMK key misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Glue component is not associated with a security configuration misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Image Builder Distribution Configuration is not encrypting AMI by Key Management Service (KMS) using a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Image Recipe EBS Disk are not encrypted using a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS MemoryDB is not encrypted at rest by AWS' Key Management Service KMS using CMKs misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS MemoryDB data is not encrypted in transit misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS FSX openzfs is not encrypted by AWS' Key Management Service (KMS) using a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS AMIs are not encrypted by Key Management Service (KMS) using Customer Managed Keys (CMKs) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS MQ Broker is not encrypted by Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS does not use a modern CaCert misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EBS Volume is not encrypted by Key Management Service (KMS) using a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Appsync API Cache is not encrypted at rest misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Appsync API Cache is not encrypted in transit misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CodePipeline artifactStore is not encrypted by Key Management Service (KMS) using a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Code Artifact Domain is not encrypted by KMS using a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS copied AMIs are not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS AMI copying does not use a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Kinesis Firehose's delivery stream is not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Kinesis Firehose Delivery Streams are not encrypted with CMK misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS replicated backups are not encrypted at rest by Key Management Service (KMS) using a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS Cluster activity streams are not encrypted by Key Management Service (KMS) using Customer Managed Keys (CMKs) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS all data stored in the Elasticsearch domain is not encrypted using a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS PostgreSQL exposed to local file read vulnerability misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS DLM cross-region events are not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS DLM cross-region events are not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS DLM-cross region schedules are not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS DLM cross-region schedules are not encrypted using a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS App Flow flow does not use Customer Managed Keys (CMKs) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS App Flow connector profile does not use Customer Managed Keys (CMKs) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Keyspace Table does not use Customer Managed Keys (CMKs) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS DB snapshot does not use Customer Managed Keys (CMKs) misconfiguration detected in code
Rule Details
Impact
How to Fix
Comprehend Entity Recognizer's model is not encrypted by KMS using a customer managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
Comprehend Entity Recognizer's volume is not encrypted by KMS using a customer managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
Connect Instance Kinesis Video Stream Storage Config is not using CMK for encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
The Connect Instance S3 Storage Configuration utilizes Customer Managed Key. misconfiguration detected in code
Rule Details
Impact
How to Fix
DynamoDB table replica does not use CMK KMS encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
MemoryDB snapshot is not encrypted by KMS using a customer managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
Neptune snapshot is not securely encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
Neptune snapshot is encrypted by KMS using a customer managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
RedShift snapshot copy is not encrypted by KMS using a customer managed Key (CMK). misconfiguration detected in code
Rule Details
Impact
How to Fix
Redshift Serverless namespace is not encrypted by KMS using a customer managed key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
DocDB Global Cluster is not encrypted at rest misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS database instances do not have deletion protection enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
CloudTrail Event Data Store does not use Customer Managed Keys (CMKs) misconfiguration detected in code
Rule Details
Impact
How to Fix
DataSync Location Object Storage exposes secrets misconfiguration detected in code
Rule Details
Impact
How to Fix
DMS endpoint is not using a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
EventBridge Scheduler Schedule is not using a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
The DMS S3 does not use a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
S3 lifecycle configuration does not set a period for aborting failed uploads misconfiguration detected in code
Rule Details
Impact
How to Fix
Secrets Manager secrets are not rotated within 90 days misconfiguration detected in code
Rule Details
Impact
How to Fix
CodeBuild S3 logs are not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
RDS Aurora Clusters do not have backtracking enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS DB cluster is encrypted using default KMS key instead of CMK misconfiguration detected in code
Rule Details
Impact
How to Fix
EFS Access Points are not enforcing a root directory misconfiguration detected in code
Rule Details
Impact
How to Fix
User identity should be enforced by EFS access points misconfiguration detected in code
Rule Details
Impact
How to Fix
SSM parameters are not utilizing KMS CMK. misconfiguration detected in code
Rule Details
Impact
How to Fix
Amazon Redshift clusters do not have automatic snapshots enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Network firewall encryption does not use a CMK misconfiguration detected in code
Rule Details
Impact
How to Fix
Network Firewall Policy does not define an encryption configuration that uses a CMK misconfiguration detected in code
Rule Details
Impact
How to Fix
Neptune is not encrypted with KMS using a customer managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EMR cluster is not enabled with local disk encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
Security configuration of the EMR Cluster does not ensure the encryption of EBS disks misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EMR cluster is not enabled with data encryption in transit misconfiguration detected in code
Rule Details
Impact
How to Fix
RDS Performance Insights are not encrypted using KMS CMKs misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS DocumentDB clusters have backup retention period less than 7 days misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Neptune DB clusters have backup retention period less than 7 days misconfiguration detected in code
Rule Details
Impact
How to Fix
Clusters of Neptune DB do not replicate tags to snapshots misconfiguration detected in code
Rule Details
Impact
How to Fix
Bedrock Agent not encrypted with Customer Master Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS S3 bucket has global view ACL permissions enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS CodeGuru Reviewer repository association does not use a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
Not all data stored in the EBS snapshot is securely encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure VM data disk is not encrypted with ADE/CMK misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Storage Account without Secure transfer enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure PostgreSQL database server with log checkpoints parameter disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure PostgreSQL database server with log connections parameter disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure PostgreSQL database server with connection throttling parameter is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Storage Account 'Trusted Microsoft Services' access not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Key Vault Keys does not have expiration date misconfiguration detected in code
Rule Details
How to Fix
Azure Key Vault secrets does not have expiration date misconfiguration detected in code
Rule Details
How to Fix
Azure Key Vault is not recoverable misconfiguration detected in code
Rule Details
Impact
How to Fix
Storage Account name does not follow naming rules misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Storage Account using insecure TLS version misconfiguration detected in code
Rule Details
Impact
How to Fix
MSSQL is not using the latest version of TLS encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Automation account variables are not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Data Explorer cluster disk encryption is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Data Explorer cluster double encryption is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Batch account does not use key vault to encrypt data misconfiguration detected in code
Rule Details
Impact
How to Fix
App services do not use Azure files misconfiguration detected in code
Rule Details
Impact
How to Fix
Not only SSL are enabled for cache for Redis misconfiguration detected in code
Rule Details
Impact
How to Fix
Managed disks do not use a specific set of disk encryption sets for customer-managed key encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
My SQL server disables geo-redundant backups misconfiguration detected in code
Rule Details
Impact
How to Fix
MySQL server disables infrastructure encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
Virtual machine scale sets do not have encryption at host enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Cosmos DB Accounts do not have CMKs encrypting data at rest misconfiguration detected in code
Rule Details
Impact
How to Fix
PostgreSQL server enables geo-redundant backups misconfiguration detected in code
Rule Details
Impact
How to Fix
Unencrypted Data Lake Store accounts misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Key Vault Purge protection is not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Key vault does not enable soft-delete misconfiguration detected in code
Rule Details
Impact
How to Fix
Key vault key is not backed by HSM misconfiguration detected in code
Rule Details
Impact
How to Fix
Key vault secrets do not have content_type set misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure AKS cluster is not configured with disk encryption set misconfiguration detected in code
Rule Details
Impact
How to Fix
MariaDB server does not enable geo-redundant backups misconfiguration detected in code
Rule Details
Impact
How to Fix
PostgreSQL server does not enable infrastructure encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Cosmos DB key based authentication is enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure PostgreSQL Flexible Server does not enable geo-redundant backups misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure PostgreSQL does not use the latest version of TLS encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Windows VM does not enable encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
Geo-Replicated Not Enabled for Azure Container Registry (ACR) misconfiguration detected in code
Rule Details
How to Fix
Azure Container Registry (ACR) Does Not Have a Quarantine Policy Enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Container Registry (ACR) Doesn't Have a Retention Policy Set misconfiguration detected in code
Rule Details
Impact
How to Fix
AKS Secrets Store Without Auto-Rotation misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Data Explorer without SLA misconfiguration detected in code
Rule Details
Impact
How to Fix
App Configuration Encryption Block Not Set misconfiguration detected in code
Rule Details
Impact
How to Fix
App Configuration Without Purge Protection Enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Service Bus Doesn't Use Double Encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Service Bus Doesn't Use Customer-Managed Key Encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Storage Accounts Without Proper Replication misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Cognitive Search Without SLA Index Updates misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Cognitive Search Without SLA for Search Index Queries misconfiguration detected in code
Rule Details
Impact
How to Fix
App Service Plan is not zone redundant misconfiguration detected in code
Rule Details
Impact
How to Fix
AKS cluster not encrypting temp disks, caches, and data flows misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Event Hub Namespace is not zone redundant misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL Database Namespace is not zone redundant misconfiguration detected in code
Rule Details
Impact
How to Fix
Standard Replication is not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
App Service Environment is not zone redundant misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Container Registry (ACR) not zone redundant misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP SQL database instance does not have backup configuration enabled misconfiguration detected in code
Rule Details
Impact
GCP cloud storage bucket with uniform bucket-level access disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP VM disks not encrypted with Customer-Supplied Encryption Keys (CSEK) misconfiguration detected in code
Rule Details
Impact
How to Fix
Boot disks for instances do not use CSEKs misconfiguration detected in code
Rule Details
Rule Details
Impact
How to Fix
GCP KMS Symmetric key not rotating in every 90 days misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP MySQL instance with local_infile database flag is not disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP SQL Server instance database flag 'cross db ownership chaining' is enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP SQL Server instance database flag 'contained database authentication' is enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Storage Bucket does not have Access and Storage Logging enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP storage bucket is logging to itself misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Cloud storage does not have versioning enabled misconfiguration detected in code
Rule Details
How to Fix
GCP Big Query Tables are not encrypted with Customer Supplied Encryption Keys (CSEK) misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Big Query Datasets are not encrypted with Customer Supplied Encryption Keys (CSEK) misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP KMS keys are not protected from deletion misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Pub/Sub Topics are not encrypted with Customer Supplied Encryption Keys (CSEK) misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Artifact Registry repositories are not encrypted with Customer Supplied Encryption Keys (CSEK) misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Big Table Instances are not encrypted with Customer Supplied Encryption Keys (CSEKs) misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP data flow jobs are not encrypted with Customer Supplied Encryption Keys (CSEK) misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Dataproc Cluster not configured with Customer-Managed Encryption Key (CMEK) misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Spanner Database is not encrypted with Customer Supplied Encryption Keys (CSEKs) misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP Memorystore for Redis does not use intransit encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
Deletion protection for Spanner Database is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Spanner Database does not have drop protection enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
BigQuery tables do not have deletion protection enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Big Table Instances do not have deletion protection enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GitHub Actions Environment Secrets defined in Terraform are not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
Gitlab project defined in Terraform does not prevent secrets misconfiguration detected in code
Rule Details
Impact
How to Fix
The --etcd-certfile and --etcd-keyfile arguments are not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
Encryption providers are not appropriately configured misconfiguration detected in code
Rule Details
Impact
How to Fix
The --cert-file and --key-file arguments are not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
The --peer-cert-file and --peer-key-file arguments are not set appropriately misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Block Storage Block Volume does not have backup enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Block Storage Block Volumes are not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Object Storage bucket does not emit object events misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Object Storage Bucket has object Versioning disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Object Storage Bucket is not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Object Storage bucket is publicly accessible misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI File Storage File Systems are not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
Not only encrypted EBS volumes are attached to EC2 instances misconfiguration detected in code
Rule Details
Impact
How to Fix
RDS clusters do not have an AWS Backup backup plan misconfiguration detected in code
Rule Details
Impact
How to Fix
EBS does not have an AWS Backup backup plan misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS DynamoDB table Auto Scaling not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Amazon EFS does not have an AWS Backup backup plan misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS SSM Parameter is not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS ElastiCache Redis cluster with Multi-AZ Automatic Failover feature set to disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS EMR cluster is not configured with security configuration misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Secret Manager Automatic Key Rotation is not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS Neptune cluster deletion protection is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS S3 bucket access control lists (ACLs) in use misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS RDS database instance not configured with encryption in transit misconfiguration detected in code
Rule Details
Impact
How to Fix
AWS SQS queue encryption using default KMS key instead of CMK misconfiguration detected in code
Rule Details
Impact
How to Fix
Storage for critical data are not encrypted with Customer Managed Key misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Data Explorer encryption at rest does not use a customer-managed key misconfiguration detected in code
Rule Details
Impact
How to Fix
Virtual Machines are not backed up using Azure Backup misconfiguration detected in code
Rule Details
Impact
How to Fix
Unattached disks are not encrypted misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure data factories are not encrypted with a customer-managed key misconfiguration detected in code
Rule Details
Impact
How to Fix
MySQL server does not enable customer-managed key for encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
PostgreSQL server does not enable customer-managed key for encryption misconfiguration detected in code
Rule Details
Impact
Azure Storage account Encryption CMKs Disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure SQL database Transparent Data Encryption (TDE) encryption disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure MariaDB database server not using latest TLS version misconfiguration detected in code
Rule Details
Impact
How to Fix
Azure Storage account soft delete is disabled misconfiguration detected in code
Rule Details
Impact
How to Fix
GCP SQL MySQL DB instance point-in-time recovery backup (Binary logs) is not enabled misconfiguration detected in code
Rule Details
Impact
How to Fix
Vertex AI instance disks not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
Document AI Processors not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
Document AI Warehouse Location is not configured to use a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
Vertex AI workbench instance disks not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI File Storage File System access is not restricted to root users misconfiguration detected in code
Rule Details
Impact
How to Fix
OCI Kubernetes Engine Cluster boot volume is not configured with in-transit data encryption misconfiguration detected in code
Rule Details
Impact
How to Fix
CI/CD Security
Artifact Integrity Validation
Missing integrity check for downloaded executable in Jenkins pipeline
Rule Details
Impact
Recommended Solution - Buildtime
Auto-merge configured in pipeline
Rule Details
Impact
Recommended Solution - Buildtime
Unpinned GitHub Actions
Rule Details
Impact
Recommended Solution - Buildtime
Azure Pipelines uses an unpinned container image
Rule Details
Impact
Recommended Solution - Buildtime
Credential Hygiene
Jenkins credentials stored with global scope
Rule Details
Impact
Recommended Solution - Buildtime
EXAMPLES
Variable is not scoped to an environment
Rule Details
Impact
Recommended Solution - Buildtime
Accesses to cloud providers using insecure long-term credentials
Rule Details
Impact
Recommended Solution - Buildtime
Secrets found in console output of a Jenkins pipeline
Rule Details
Impact
Recommended Solution - Buildtime
GitHub Actions environment variables exposed when printed to log
Rule Details
Impact
Recommended Solution - Buildtime
Secrets found in webhook URL
Rule Details
Impact
Recommended Solution - Buildtime
GitHub organization secret not scoped
Rule Details
Impact
Recommended Solution - Buildtime
Insecure definition of secret variable in Azure pipeline
Rule Details
Impact
Recommended Solution - Buildtime
Unrotated organization secrets in GitHub Actions
Rule Details
Impact
Recommended Solution - Buildtime
Unrotated repository secrets in GitHub Actions
Rule Details
Impact
Recommended Solution - Buildtime
Data Protection
Repository webhooks sent over unencrypted channel
Rule Details
Impact
Recommended Solution - Buildtime
Forking of private repository is allowed
Rule Details
Impact
Recommended Solution - Buildtime
GitHub organization webhook SSL verification is disabled
Rule Details
Impact
Recommended Solution - Buildtime
Force push to default branch is allowed in repository
Rule Details
Impact
Recommended Solution - Buildtime
Repository webhook SSL verification is disabled
Rule Details
Impact
Recommended Solution - Buildtime
GitHub organization members can create public repositories
Rule Details
Impact
Recommended Solution - Buildtime
GitLab project webhook SSL verification disabled
Rule Details
Impact
Recommended Solution - Buildtime
GitHub private repository made public
Rule Details
Impact
Recommended Solution - Buildtime
Certificate not verified by Jenkins pipeline command
Rule Details
Impact
Recommended Solution - Buildtime
Jenkins pipeline commands transmit data over an unencrypted channel
Rule Details
Impact
Recommended Solution - Buildtime
Forking of private repositories in the GitHub organization is allowed
Rule Details
Impact
Recommended Solution - Buildtime
Private repository forks can lead to code leakage in GitHub
Rule Details
Impact
Recommended Solution - Buildtime
Project service hook SSL verification is disabled
Rule Details
Impact
Recommended Solution - Buildtime
Project Service hooks sent over unencrypted channel
Rule Details
Impact
Recommended Solution - Buildtime
Public repository created in GitHub
Rule Details
Impact
Recommended Solution - Buildtime
Dependency Chains
Packages insecurely installed through ��npm install�� command in Jenkins pipeline
Rule Details
Impact
Recommended Solution - Buildtime
GitHub repository missing NPM lock file
Rule Details
Impact
Recommended Solution - Buildtime
Unencrypted channel used in GitHub repository to download dependencies from NPM registry
Rule Details
Impact
Recommended Solution - Buildtime
Internal NPM package is not scoped in GitHub repository
Rule Details
Impact
Recommended Solution - Buildtime
Secrets found in NPM dependency download URL in GitHub repository
Rule Details
Impact
Recommended Solution - Buildtime
NPM package lock file verifies integrity with weak hash algorithm (GitHub)
Rule Details
Impact
Recommended Solution - Buildtime
Possible Python typosquatting detected in a GitHub repository
Rule Details
Impact
Recommended Solution - Buildtime
Missing '.npmrc' file in GitHub repository
Rule Details
Impact
Recommended Solution - Buildtime
Secret exposed in proxy URL within '.npmrc' file of a GitHub repository
Rule Details
Impact
Recommended Solution - Buildtime
Secret exposed in registry URL within '.npmrc' file of a GitHub repository
Rule Details
Impact
Recommended Solution - Buildtime
Deprecated package used in NPM project of a GitHub repository
Rule Details
Impact
Recommended Solution - Buildtime
Potential dependency confusion in a GitHub repository due to package name or scope available in registry
Rule Details
Impact
Recommended Solution - Buildtime
Unencrypted channel used by '.npmrc' file of a GitHub repository to download dependencies from proxy
Rule Details
Impact
Recommended Solution - Buildtime
NPM project contains unused dependencies in a GitHub repository
Rule Details
Impact
Recommended Solution - Buildtime
NPM package downloaded from git without commit hash reference in a GitHub repository
Rule Details
Impact
Recommended Solution - Buildtime
Flow Control Mechanism
Actively used repository lacks branch protection rules
Rule Details
Impact
Recommended Solution - Buildtime
GitHub branch protection not enforced on administrators
Rule Details
Impact
Recommended Solution - Buildtime
Pull request reviews are not required in repository before merging to the default branch
Rule Details
Impact
Recommended Solution - Buildtime
Required reviews can be bypassed using GitHub Actions
Rule Details
Impact
Recommended Solution - Buildtime
Branch protection rule allows push to default branch
Rule Details
Impact
Recommended Solution - Buildtime
Merge request approvals in GitLab not required for default branch
Rule Details
Impact
Recommended Solution - Buildtime
Code Owners Removed in GitHub repository
Rule Details
Impact
Recommended Solution - Buildtime
Reviews in GitHub may no longer be required before merging
Rule Details
Impact
Recommended Solution - Buildtime
Approvals for pull requests on the default branch in repository are not revoked when new commits are pushed
Rule Details
Impact
Recommended Solution - Buildtime
Requestors allowed to self-approve pull requests on default branch in Azure Repos
Rule Details
Impact
Recommended Solution - Buildtime
Code owners reviews are not required in GitHub before merging to the default branch
Rule Details
Impact
Recommended Solution - Buildtime
Merging to default branch with outdated code allowed in GitHub
Rule Details
Impact
Recommended Solution - Buildtime
Identitiy Access Management
2FA is not enforced in GitHub
Rule Details
Impact
Recommended Solution - Buildtime
Unrotated deploy keys
Rule Details
Impact
Recommended Solution - Buildtime
Unrotated BitBucket access keys
Rule Details
Impact
Recommended Solution - Buildtime
Inactive GitLab user accounts
Rule Details
Impact
Recommended Solution - Buildtime
Jenkins provides full access to anonymous visitors
Rule Details
Impact
Recommended Solution - Buildtime
Jenkins provides full access to authenticated user accounts
Rule Details
Impact
Recommended Solution - Buildtime
GitHub User account is missing 2FA
Rule Details
Impact
Recommended Solution - Buildtime
Permissive GitHub organization base permissions
Rule Details
Impact
Recommended Solution - Buildtime
Outside collaborators have admin access to a GitHub repository
Rule Details
Impact
Recommended Solution - Buildtime
GitHub deploy key has a weak SSH signature
Rule Details
Impact
Recommended Solution - Buildtime
Create and delete access keys
Weak authentication service in use in Jenkins
Rule Details
Impact
Recommended Solution - Buildtime
Jenkins provides read access to anonymous visitors
Rule Details
Impact
Recommended Solution - Buildtime
No authentication is configured in Jenkins
Rule Details
Impact
Recommended Solution - Buildtime
BitBucket access key has a weak SSH signature
Rule Details
Impact
Recommended Solution - Buildtime
Create and delete access keys
Excessive user permissions to a repository
Rule Details
Impact
Recommended Solution - Buildtime
Excessive user permissions to a GitLab project
Rule Details
Impact
Recommended Solution - Buildtime
GitHub inactive user account programmatic credentials
Rule Details
Impact
Recommended Solution - Buildtime
Delete Credentials
Any organization member in GitHub can create internal repositories
Rule Details
Impact
Recommended Solution - Buildtime
Any organization member In GitHub can create private repositories
Rule Details
Impact
Recommended Solution - Buildtime
Default branch does not require signed commits in GitHub
Rule Details
Impact
Recommended Solution - Buildtime
Input Validation
GitHub Actions pipeline vulnerable to command injection
Rule Details
Impact
Recommended Solution - Buildtime
Possible command injection detected in GitHub user event
Rule Details
Impact
Recommended Solution - Buildtime
GitHub Actions workflow allows command execution through the standard output stream
Rule Details
Impact
Recommended Solution - Buildtime
Logging And Visibility
Audit log not installed on Jenkins
Rule Details
Impact
Recommended Solution - Buildtime
Pipeline Based Access Controls
Deploy keys assigned with write permissions
Rule Details
Impact
Recommended Solution - Buildtime
All Jenkins instance jobs run with high privileges
Rule Details
Impact
Recommended Solution - Buildtime
Jobs are allowed to run on the Jenkins Controller
Rule Details
Impact
Recommended Solution - Buildtime
Jenkins jobs are executed with high privileges by default
Rule Details
Impact
Recommended Solution - Buildtime
Jenkins jobs can be executed with high privileges
Rule Details
Impact
Recommended Solution - Buildtime
GitLab project job token authorized to access other GitLab projects
Rule Details
Impact
Recommended Solution - Buildtime
Default GitHub Actions workflow permissions in the repository set to read and write
Rule Details
Impact
Recommended Solution - Buildtime
Default GitHub Actions workflow permissions in the organization set to read and write
Rule Details
Impact
Recommended Solution - Buildtime
Excessive GitHub Actions pipeline permissions on the repository
Rule Details
Impact
Recommended Solution - Buildtime
GitLab project configured for group-wide access using job token
Rule Details
Impact
Recommended Solution - Buildtime
PPE
Direct Poisoned Pipeline Execution
Rule Details
Impact
Recommended Solution - Buildtime
Direct Poisoned Pipeline Execution by outside collaborators
Rule Details
Impact
Recommended Solution - Buildtime
System Configurations
Vulnerable Jenkins plugins
Rule Details
Impact
Recommended Solution - Buildtime
Vulnerable Jenkins version in use
Rule Details
Impact
Recommended Solution - Buildtime
Throttling is not enabled in GitLab
Rule Details
Impact
Recommended Solution - Buildtime
Modify settings through the console:
Modify settings through the API:
Access to resources on the GitLab server from GitLab services is not restricted
Rule Details
Impact
Recommended Solution - Buildtime
Modify settings through the console
Modify settings through the API
Set an allowlist through the console
Set an allowlist through the API
Public and private repositories connected to shared CI system
Rule Details
Impact
Recommended Solution - Buildtime
LDAP in Jenkins is configured to use an unencrypted channel
Rule Details
Impact
Recommended Solution - Buildtime
Jenkins instance traffic sent over an unencrypted channel
Rule Details
Impact
Recommended Solution - Buildtime
GitHub Actions is enabled and not used in a GitHub repository
Rule Details
Impact
Recommended Solution - Buildtime
Self-hosted runner group allows public repositories
Rule Details
Impact
Recommended Solution - Buildtime
GitHub organization's identity not confirmed with a verified badge
Rule Details
Impact
Recommended Solution - Buildtime
Third Party Services
Excessive GitHub App permissions
Rule Details
Impact
Recommended Solution - Buildtime
Unrestricted usage of GitHub Actions allowed in the repository
Rule Details
Impact
Recommended Solution - Buildtime
Unrestricted usage of GitHub Actions allowed across the organization
Rule Details
Impact
Recommended Solution - Buildtime
Mutable orb used in the CircleCI pipeline
Rule Details
Impact
Recommended Solution - Buildtime
Secrets Security
API Service Keys
Mailchimp Access Key detected in code
Rule Details
Impact
How to Fix
Slack Token detected in code
Rule Details
Impact
How to Fix
Square OAuth Secret detected in code
Rule Details
Impact
How to Fix
Stripe Access Key detected in code
Rule Details
Impact
How to Fix
Twilio Access Key detected in code
Rule Details
Impact
How to Fix
Airtable API Key detected in code
Rule Details
Impact
How to Fix
Algolia Key detected in code
Rule Details
Impact
How to Fix
Asana Key detected in code
Rule Details
Impact
How to Fix
Codecov API key detected in code
Rule Details
Impact
How to Fix
Coinbase Key detected in code
Rule Details
Impact
How to Fix
Confluent Key detected in code
Rule Details
Impact
How to Fix
Discord Token detected in code
Rule Details
Impact
How to Fix
Doppler API Key detected in code
Rule Details
Impact
How to Fix
Dropbox App Credential detected in code
Rule Details
Impact
How to Fix
Dynatrace token detected in code
Rule Details
Impact
How to Fix
Elastic Email Key detected in code
Rule Details
Impact
How to Fix
Fastly Personal Token detected in code
Rule Details
Impact
How to Fix
FullStory API Key detected in code
Rule Details
Impact
How to Fix
Google API Key detected in code
Rule Details
Impact
How to Fix
Grafana Token detected in code
Rule Details
Impact
How to Fix
HubSpot API Key detected in code
Rule Details
Impact
How to Fix
Intercom Access Token detected in code
Rule Details
Impact
How to Fix
Jira Token detected in code
Rule Details
Impact
How to Fix
LaunchDarkly Personal Token detected in code
Rule Details
Impact
How to Fix
Netlify Token detected in code
Rule Details
Impact
How to Fix
New Relic Key detected in code
Rule Details
Impact
How to Fix
Notion Integration Token detected in code
Rule Details
Impact
How to Fix
Okta Token detected in code
Rule Details
Impact
How to Fix
PagerDuty Authorization Token detected in code
Rule Details
Impact
How to Fix
PlanetScale Token detected in code
Rule Details
Impact
How to Fix
Postman API Key detected in code
Rule Details
Impact
How to Fix
RapidAPI Key detected in code
Rule Details
Impact
How to Fix
Readme API Key detected in code
Rule Details
Impact
How to Fix
Sentry Token detected in code
Rule Details
Impact
How to Fix
Splunk User Credential detected in code
Rule Details
Impact
How to Fix
Sumo Logic Key detected in code
Rule Details
Impact
How to Fix
Telegram Bot Token detected in code
Rule Details
Impact
How to Fix
Typeform API Token detected in code
Rule Details
Impact
How to Fix
Yandex Predictor API key detected in code
Rule Details
Impact
How to Fix
Cloudflare API Credential detected in code
Rule Details
Impact
How to Fix
Vercel API Token detected in code
Rule Details
Impact
How to Fix
Webflow API Token detected in code
Rule Details
Impact
How to Fix
Scalr API Token detected in code
Rule Details
Impact
How to Fix
Braintree Access Token detected in code
Rule Details
Impact
How to Fix
Braintree Payments Key detected in code
Rule Details
Impact
How to Fix
PayPal Token ID detected in code
Rule Details
Impact
How to Fix
PayPal Token Key detected in code
Rule Details
Impact
How to Fix
Braintree Payments Id detected in code
Rule Details
Impact
How to Fix
SonarQube Token detected in code
Rule Details
Impact
How to Fix
SendGrid Key detected in code
Rule Details
Impact
How to Fix
Firebase Cloud Messaging API key detected in code
Rule Details
Impact
How to Fix
Shopify Generic App Token detected in code
Rule Details
Impact
How to Fix
Mapbox Token detected in code
Rule Details
Impact
How to Fix
PubNub Subscription Key detected in code
Rule Details
Impact
How to Fix
PubNub Publish Key detected in code
Rule Details
Impact
How to Fix
Mailgun Primary Account API key detected in code
Rule Details
Impact
How to Fix
SendinBlue Key detected in code
Rule Details
Impact
How to Fix
Shopify Private App Token detected in code
Rule Details
Impact
How to Fix
Flutterwave API Key detected in code
Rule Details
Impact
How to Fix
Checkout.com API Key detected in code
Rule Details
Impact
How to Fix
Square Access Token detected in code
Rule Details
Impact
How to Fix
Square Access Token V2 detected in code
Rule Details
Impact
How to Fix
Typeform Personal Access Token detected in code
Rule Details
Impact
How to Fix
Mailgun Domain Sending Key detected in code
Rule Details
Impact
How to Fix
Frame IO Token detected in code
Rule Details
Impact
How to Fix
OpenAI API Key detected in code
Rule Details
Impact
How to Fix
Samsara API Key detected in code
Rule Details
Impact
How to Fix
Anthropic API key detected in code
Rule Details
Impact
How to Fix
Hugging Face token detected in code
Rule Details
Impact
How to Fix
Microsoft Teams webhook detected in code
Rule Details
Impact
How to Fix
MonkeyLearn API Key detected in code
Rule Details
Impact
How to Fix
Clarifai API Key detected in code
Rule Details
Impact
How to Fix
Discord Webhook URL detected in code
Rule Details
Impact
How to Fix
reCAPTCHA key detected in code
Rule Details
Impact
How to Fix
Stripe Webhook Secret detected in code
Rule Details
Impact
How to Fix
Zillow Key detected in code
Rule Details
Impact
How to Fix
Google Bard API Key detected in code
Rule Details
Impact
How to Fix
Octopus Deploy API key detected in code
Rule Details
Impact
How to Fix
Grafana service account token detected in code
Rule Details
Impact
How to Fix
New Relic APM license key detected in code
Rule Details
Impact
How to Fix
Plaid access token detected in code
Rule Details
Impact
How to Fix
Replicate user access token detected in code
Rule Details
Impact
How to Fix
Sourcegraph access token detected in code
Rule Details
Impact
How to Fix
Zapier webhook url detected in code
Rule Details
Impact
How to Fix
Authentication Authorization
Basic Auth Credential detected in code
Rule Details
Impact
How to Fix
JSON Web Token detected in code
Rule Details
Impact
How to Fix
Atlassian Oauth2 Key detected in code
Rule Details
Impact
How to Fix
Auth0 Key detected in code
Rule Details
Impact
How to Fix
GCP Service Account Auth Key detected in code
Rule Details
Impact
How to Fix
AWS MWS Auth Token detected in code
Rule Details
Impact
How to Fix
Salesforce Refresh Token detected in code
Rule Details
Impact
How to Fix
Okta Keys Client Secret detected in code
Rule Details
Impact
How to Fix
Yahoo OAuth2 Keys detected in code
Rule Details
Impact
How to Fix
Eventbrite OAuth2 Keys detected in code
Rule Details
Impact
How to Fix
Bearer token detected in code
Rule Details
Impact
How to Fix
SSH Password detected in code
Rule Details
Impact
How to Fix
Slack bot token detected in code
Rule Details
Impact
How to Fix
Cloud Infrastructure
AWS Access Key detected in code
Rule Details
Impact
How to Fix
Azure Storage Account Access Key detected in code
Rule Details
Impact
How to Fix
IBM Cloud IAM Key detected in code
Rule Details
Impact
How to Fix
IBM COS HMAC credential detected in code
Rule Details
Impact
How to Fix
SoftLayer Credential detected in code
Rule Details
Impact
How to Fix
Alibaba Cloud Key detected in code
Rule Details
Impact
How to Fix
Databricks Authentication Token detected in code
Rule Details
Impact
How to Fix
DigitalOcean Token detected in code
Rule Details
Impact
How to Fix
Terraform Cloud API Token detected in code
Rule Details
Impact
How to Fix
Heroku Platform Key detected in code
Rule Details
Impact
How to Fix
Pulumi Access Token detected in code
Rule Details
Impact
How to Fix
Vault Unseal Key detected in code
Rule Details
Impact
How to Fix
Docker Swarm Join Token detected in code
Rule Details
Impact
How to Fix
Azure Functions HTTP Trigger Key detected in code
Rule Details
Impact
How to Fix
Azure Machine Learning web service API key detected in code
Rule Details
Impact
How to Fix
Docker Swarm Unlock Key detected in code
Rule Details
Impact
How to Fix
Azure Subscription Key detected in code
Rule Details
Impact
How to Fix
Database Data Store
Cloudant Credential detected in code
Rule Details
Impact
How to Fix
MongoDB Connection String detected in code
Rule Details
Impact
How to Fix
Generic High Entropy
Base64 High Entropy String detected in code
Rule Details
Impact
How to Fix
Fix - Terraform
Private Key detected in code
Rule Details
Impact
How to Fix
Hex High Entropy String detected in code
Rule Details
Impact
How to Fix
Random High Entropy String detected in code
Rule Details
Impact
How to Fix
Source Control CI/CD
GitHub repository defined in Terraform is not Private
Rule Details
Impact
How to Fix
Artifactory Credentials detected in code
Rule Details
Impact
How to Fix
NPM Token detected in code
Rule Details
Impact
How to Fix
Bitbucket Key detected in code
Rule Details
Impact
How to Fix
Buildkite Agent Token detected in code
Rule Details
Impact
How to Fix
CircleCI Personal Token detected in code
Rule Details
Impact
How to Fix
DroneCI Token detected in code
Rule Details
Impact
How to Fix
GitHub Token detected in code
Rule Details
Impact
How to Fix
GitLab Token detected in code
Rule Details
Impact
How to Fix
Python Package Index Key detected in code
Rule Details
Impact
How to Fix
RubyGems API Key detected in code
Rule Details
Impact
How to Fix
Travis Personal Token detected in code
Rule Details
Impact
How to Fix
Crates API Token detected in code
Rule Details
Impact
How to Fix
NuGet API Key detected in code
Rule Details
Impact
How to Fix
Clojars Deploy Token detected in code
Rule Details
Impact
How to Fix
Rails Master Key detected in code
Rule Details
Impact
How to Fix
General
GitGuardian Public Monitoring API Key detected in code
Rule Details
Impact
How to Fix
Mandrill API Key detected in code
Rule Details
Impact
How to Fix
Elastic Cloud Credentials detected in code
Rule Details
Impact
How to Fix
OpenWeatherMap Token detected in code
Rule Details
Impact
How to Fix
Mailjet Keys ID detected in code
Rule Details
Impact
How to Fix
Mailjet Keys Secret detected in code
Rule Details
Impact
How to Fix
Pusher Channels Key detected in code
Rule Details
Impact
How to Fix
Pusher Channels Secret detected in code
Rule Details
Impact
How to Fix
LinkedIn OAuth2 Keys detected in code
Rule Details
Impact
How to Fix
LinkedIn OAuth2 Secrets detected in code
Rule Details
Impact
How to Fix
WeChat App User ID detected in code
Rule Details
Impact
How to Fix
WeChat App Keys detected in code
Rule Details
Impact
How to Fix
Webex App Keys detected in code
Rule Details
Impact
How to Fix
Webex App Secrets detected in code
Rule Details
Impact
How to Fix
Lacework API Keys detected in code
Rule Details
Impact
How to Fix
Lacework API Secrets detected in code
Rule Details
Impact
How to Fix
Zendesk Token detected in code
Rule Details
Impact
How to Fix
Zoom API JWT Keys detected in code
Rule Details
Impact
How to Fix
Zoom API JWT Secrets detected in code
Rule Details
Impact
How to Fix
Zoom API Keys detected in code
Rule Details
Impact
How to Fix
Zoom API Secrets detected in code
Rule Details
Impact
How to Fix
Contentful Content Delivery API Key detected in code
Rule Details
Impact
How to Fix
MariaDB Credentials detected in code
Rule Details
Impact
How to Fix
AWS SES client secret detected in code
Rule Details
Impact
How to Fix
Adobe API ID detected in code
Rule Details
Impact
How to Fix
Adobe API Secret detected in code
Rule Details
Impact
How to Fix
DB2 Credentials detected in code
Rule Details
Impact
How to Fix
Pingdom Token detected in code
Rule Details
Impact
How to Fix
Redis Credentials detected in code
Rule Details
Impact
How to Fix
Coveralls Token detected in code
Rule Details
Impact
How to Fix
Azure Active Directory Client Secret detected in code
Rule Details
Impact
How to Fix
DataDog Token detected in code
Rule Details
Impact
How to Fix
GitHub OAuth App Key detected in code
Rule Details
Impact
How to Fix
GitHub OAuth App Client ID detected in code
Rule Details
Impact
How to Fix
LDAP Credentials detected in code
Rule Details
Impact
How to Fix
MySQL User Name detected in code
Rule Details
Impact
How to Fix
MySQL Password detected in code
Rule Details
Impact
How to Fix
PostgresSQL User Name detected in code
Rule Details
Impact
How to Fix
PostgresSQL Password detected in code
Rule Details
Impact
How to Fix
FTP User Name detected in code
Rule Details
Impact
How to Fix
FTP Password detected in code
Rule Details
Impact
How to Fix
AMQP User Name detected in code
Rule Details
Impact
How to Fix
AMQP Password detected in code
Rule Details
Impact
How to Fix
Rails Secret Key Base detected in code
Rule Details
Impact
How to Fix
Azure Service Management Certificate detected in code
Rule Details
Impact
How to Fix
Codeclimate key detected in code
Rule Details
Impact
How to Fix
Facebook Access Token detected in code
Rule Details
Impact
How to Fix
Putty Private Key detected in code
Rule Details
Impact
How to Fix
Tableau Personal Access Token detected in code
Rule Details
Impact
How to Fix
Line Messaging OAuth2 Keys detected in code
Rule Details
Impact
How to Fix
Authentication Tuple detected in code
Rule Details
Impact
How to Fix
Generic Terraform Variable Secret detected in code
Rule Details
Impact
How to Fix
SMTP credentials Password detected in code
Rule Details
Impact
How to Fix
SMTP credentials - Secret detected in code
Rule Details
Impact
How to Fix
Django secret key detected in code
Rule Details
Impact
How to Fix
Salesforce OAuth2 ID detected in code
Rule Details
Impact
How to Fix
Salesforce OAuth2 secret detected in code
Rule Details
Impact
How to Fix
Azure DevOps personal access token detected in code
Rule Details
Impact
How to Fix
Splunk authentication token detected in code
Rule Details
Impact
How to Fix
HashiCorp Vault token detected in code
Rule Details
Impact
How to Fix
Kubernetes cluster credentials detected in code
Rule Details
Impact
How to Fix
Jira basic authentication credentials detected in code
Rule Details
Impact
How to Fix
Neo4j credentials detected in code
Rule Details
Impact
How to Fix
Keycloak API key detected in code
Rule Details
Impact
How to Fix
Oracle credentials detected in code
Rule Details
Impact
How to Fix
Thycotic Secret Server credentials detected in code
Rule Details
Impact
How to Fix
Gemfury access token detected in code
Rule Details
Impact
How to Fix
Zoho OAuth2 keys detected in code
Rule Details
Impact
How to Fix
Zoom SDK keys detected in code
Rule Details
Impact
How to Fix
Cloudera model key detected in code
Rule Details
Impact
How to Fix
Akamai API client secret detected in code
Rule Details
Impact
How to Fix
Generic database assignment detected in code
Rule Details
Impact
How to Fix
Generic CLI key detected in code
Rule Details
Impact
How to Fix
Akamai API client token detected in code
Rule Details
Impact
How to Fix
ODBC connection string detected in code
Rule Details
Impact
How to Fix
Sauce Labs keys detected in code
Rule Details
Impact
How to Fix
OVH keys detected in code
Rule Details
Impact
How to Fix
PingIdentity keys detected in code
Rule Details
Impact
How to Fix
Slack Application secret detected in code
Rule Details
Impact
How to Fix
Slack Application ID detected in code
Rule Details
Impact
How to Fix
Redis server password detected in code
Rule Details
Impact
How to Fix
Slack signing secret detected in code
Rule Details
Impact
How to Fix
Encrypted Private Key detected in code
Rule Details
Impact
How to Fix
Duo key detected in code
Rule Details
Impact
How to Fix
Slack application credentials detected in code
Rule Details
Impact
How to Fix
Base64 AWS SES keys detected in code
Rule Details
Impact
How to Fix
Base64 AWS IAM Secret Key detected in code
Rule Details
Impact
How to Fix
Slack app token detected in code
Rule Details
Impact
How to Fix
Razorpay API key detected in code
Rule Details
Impact
How to Fix
PGP Private Key detected in code
Rule Details
Impact
How to Fix
Twitter access keys detected in code
Rule Details
Impact
How to Fix
Base64 basic authentication detected in code
Rule Details
Impact
How to Fix
GitHub App Keys detected in code
Rule Details
Impact
How to Fix
Snowflake credentials detected in code
Rule Details
Impact
How to Fix
Azure OpenAI API endpoint detected in code
Rule Details
Impact
How to Fix
Azure OpenAI API key detected in code
Rule Details
Impact
How to Fix
Fernet key detected in code
Rule Details
Impact
How to Fix
NX Cloud token detected in code
Rule Details
Impact
How to Fix
Redshift credentials detected in code
Rule Details
Impact
How to Fix
Solr credentials detected in code
Rule Details
Impact
How to Fix
Discord OAuth2 secret detected in code
Rule Details
Impact
How to Fix
Kubernetes Docker secret detected in code
Rule Details
Impact
How to Fix
Workato API key detected in code
Rule Details
Impact
How to Fix
Google OAuth2 secret detected in code
Rule Details
Impact
How to Fix
DigitalOcean Spaces secret detected in code
Rule Details
Impact
How to Fix
DigitalOcean Spaces connection string detected in code
Rule Details
Impact
How to Fix
LaunchDarkly SDK key detected in code
Rule Details
Impact
How to Fix
GitLab enterprise server key detected in code
Rule Details
Impact
How to Fix
PubNub Secret Key detected in code
Rule Details
Impact
How to Fix
Shopify Keys detected in code
Rule Details
Impact
How to Fix
New Relic Agent Token detected in code
Rule Details
Impact
How to Fix
New Relic API Key detected in code
Rule Details
Impact
How to Fix
HashiCorp Vault Unseal Key detected in code
Rule Details
Impact
How to Fix
Slack Webhook URL detected in code
Rule Details
Impact
How to Fix
Samsara API token detected in code
Rule Details
Impact
How to Fix
Dropbox Key token detected in code
Rule Details
Impact
How to Fix
Figma Personal Access Token detected in code
Rule Details
Impact
How to Fix
Azure Functions App Key Header detected in code
Rule Details
Impact
How to Fix
Azure Functions App Key Query Parameter detected in code
Rule Details
Impact
How to Fix
Jenkins API Token detected in code
Rule Details
Impact
How to Fix
Nessus Agent Key detected in code
Rule Details
Impact
How to Fix
VISA Basic Authentication Credentials detected in code
Rule Details
Impact
How to Fix
OpenAI Project API Key detected in code
Rule Details
Impact
How to Fix
Midtrans API Key detected in code
Rule Details
Impact
How to Fix
Base64 Midtrans API Key detected in code
Rule Details
Impact
How to Fix
Atlassian Access Token detected in code
Rule Details
Impact
How to Fix
New Relic Insights Query Key detected in code
Rule Details
Impact
How to Fix
ASPNet Validation Key detected in code
Rule Details
Impact
How to Fix
ASPNet Decryption Key detected in code
Rule Details
Impact
How to Fix
InfluxDB Token detected in code
Rule Details
Impact
How to Fix
New Relic Insights Insert Key detected in code
Rule Details
Impact
How to Fix
Prefixed New Relic Insights Insert Key detected in code
Rule Details
Impact
How to Fix
MSSQL Credentials detected in code
Rule Details
Impact
How to Fix
MSSQL Connection String detected in code
Rule Details
Impact
How to Fix
Cloudinary API Key URL detected in code
Rule Details
Impact
How to Fix
Cloudinary API Key Config detected in code
Rule Details
Impact
How to Fix
Google OAuth2 token detected in code
Rule Details
Impact
How to Fix
Freshdesk API Token detected in code
Rule Details
Impact
How to Fix
Grafana Cloud API Key detected in code
Rule Details
Impact
How to Fix
Base64 AWS IAM Access Key detected in code
Rule Details
Impact
How to Fix
Aiven API Key detected in code
Rule Details
Impact
How to Fix
Anthropic Admin Key detected in code
Rule Details
Impact
How to Fix
CircleCI Project Token detected in code
Rule Details
Impact
How to Fix
Tencent Cloud Secret ID detected in code
Rule Details
Impact
How to Fix
Azure API Management Repository Key detected in code
Rule Details
Impact
How to Fix
Azure API Management Subscription Key detected in code
Rule Details
Impact
How to Fix
Azure App Configuration Connection String detected in code
Rule Details
Impact
How to Fix
Azure Communication Services Connection String detected in code
Rule Details
Impact
How to Fix
Azure Batch Key Identifiable detected in code
Rule Details
Impact
How to Fix
Azure Cosmosdb Key Identifiable detected in code
Rule Details
Impact
How to Fix
Azure SignalR Connection String detected in code
Rule Details
Impact
How to Fix
Azure Entra ID Token detected in code
Rule Details
Impact
How to Fix
Azure Search Admin Key detected in code
Rule Details
Impact
How to Fix
Kubernetes Service Account Token detected in code
Rule Details
Impact
How to Fix
EasyPost API Key detected in code
Rule Details
Impact
How to Fix
MongoDB credentials detected in code
Rule Details
Impact
How to Fix
Trendmicro Cloudone Apikey v2 detected in code
Rule Details
Impact
How to Fix
Slack Configuration Refresh Token detected in code
Rule Details
Impact
How to Fix
DigitalOcean OAuth Application Token v1 detected in code
Rule Details
Impact
How to Fix
DigitalOcean Personal Access Token v1 detected in code
Rule Details
Impact
How to Fix
DigitalOcean Refresh Token v1 detected in code
Rule Details
Impact
How to Fix
FTP Credentials Assignment detected in code
Rule Details
Impact
How to Fix
Amqp Assignment detected in code
Rule Details
Impact
How to Fix
Sourcegraph Access Token v1 detected in code
Rule Details
Impact
How to Fix
Sourcegraph Access Token v3 detected in code
Rule Details
Impact
How to Fix
Dropbox Access Token detected in code
Rule Details
Impact
How to Fix
PostgreSQL Connection String detected in code
Rule Details
Impact
How to Fix
Slack Workflow Webhook URL detected in code
Rule Details
Impact
How to Fix
Google OAuth2 ID detected in code
Rule Details
Impact
How to Fix
HashiCorp Vault Batch Token detected in code
Rule Details
Impact
How to Fix
HashiCorp Vault Recovery token detected in code
Rule Details
Impact
How to Fix
Groq API Key detected in code
Rule Details
Impact
How to Fix
Artifactory Access Token detected in code
Rule Details
Impact
How to Fix
Google OAuth Refresh token detected in code
Rule Details
Impact
How to Fix
GitLab Deploy Token was detected in code
Rule Details
Impact
How to Fix
GitLab Runner Authentication Token was detected in code
Rule Details
Impact
How to Fix
GitGuardian Internal Monitoring Key was detected in code
Rule Details
Impact
How to Fix
Shippo API token was detected in code
Rule Details
Impact
How to Fix
Infracost API Key was detected in code
Rule Details
Impact
How to Fix
Vapi API Key was detected in code
Rule Details
Impact
How to Fix
Brave Search API Key detected in code
Rule Details
Impact
How to Fix
Dify API Key was detected in code
Rule Details
Impact
How to Fix
Linear Personal API key was detected in code
Rule Details
Impact
How to Fix
Trendmicro Cloudone Apikey v1 detected in code
Rule Details
Impact
How to Fix
Airtable API Key v1 detected in code
Rule Details
Impact
How to Fix
Gitlab Personal Token detected in code
Rule Details
Impact
How to Fix
Artifactory Reference Token With Host detected in code
Rule Details
Impact
How to Fix
New Relic API Service Key detected in code
Rule Details
Impact
How to Fix
Artifactory Basic Auth Credentials detected in code
Rule Details
Impact
How to Fix
Datadog Secret detected in code
Rule Details
Impact
How to Fix
Hashicorp Vault AppRole Authentication detected in code
Rule Details
Impact
How to Fix
Snowflake Connector Credentials detected in code
Rule Details
Impact
How to Fix
Artifactory Reference Token detected in code
Rule Details
Impact
How to Fix
Azure Logic App Shared Access Signature detected in code
Rule Details
Impact
How to Fix
Gitlab Trigger Token detected in code
Rule Details
Impact
How to Fix
Laravel App Key detected in code
Rule Details
Impact
How to Fix
Langfuse Credentials detected in code
Rule Details
Impact
How to Fix
Alchemy API Key detected in code
Rule Details
Impact
How to Fix
Alchemy API Key V2 detected in code
Rule Details
Impact
How to Fix
Azure DevOps Personal Access Token with Organization detected in code
Rule Details
Impact
How to Fix
Azure Event Grid Access Key detected in code
Rule Details
Impact
How to Fix
ASP.NET Decryption Key detected in code
Rule Details
Impact
How to Fix
Firecrawl API Key detected in code
Rule Details
Impact
How to Fix
GitLab Feature Flags Client Token detected in code
Rule Details
Impact
How to Fix
IBM API Connect credentials detected in code
Rule Details
Impact
How to Fix
IBM COS HMAC credentials detected in code
Rule Details
Impact
How to Fix
Checkout.com Sandbox API Secret Key detected in code
Rule Details
Impact
How to Fix
Contributed Systems Sidekiq API Key detected in code
Rule Details
Impact
How to Fix
Duffel API Key detected in code
Rule Details
Impact
How to Fix
Elliptic Curve Private Key Base64 detected in code
Rule Details
Impact
How to Fix
Elliptic Curve Private Key detected in code
Rule Details
Impact
How to Fix
Okta OAuth 2.0 Client Credentials with Host detected in code
Rule Details
Impact
How to Fix
Llama Cloud API Key detected in code
Rule Details
Impact
How to Fix
OpenAI Project API Key V2 detected in code
Rule Details
Impact
How to Fix
OpenRouter API Key detected in code
Rule Details
Impact
How to Fix
PayPal OAuth2 Keys detected in code
Rule Details
Impact
How to Fix
VirusTotal API Key detected in code
Rule Details
Impact
How to Fix
Ubidots API Key detected in code
Rule Details
Impact
How to Fix
Resend API Key detected in code
Rule Details
Impact
How to Fix

Back to home page