Skip to content

Commit

Permalink
update docs
Browse files Browse the repository at this point in the history
  • Loading branch information
alanrtao committed Apr 21, 2023
1 parent f2dc00c commit eabeed5
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 8 deletions.
2 changes: 1 addition & 1 deletion .tflint.hcl
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ plugin "terraform" {
// ------ RELEVANT PLUGIN CONFIG ---
plugin "secsmells" {
enabled = true
version = "0.1.0"
version = "0.2.0"
source = "github.com/alanrtao/tflint-ruleset-secsmells"
signing_key = <<-KEY
-----BEGIN PGP PUBLIC KEY BLOCK-----
Expand Down
15 changes: 8 additions & 7 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,13 +14,14 @@
- Specific rules within the plugin (see [`/rules`](/rules) or alternatively [main.go](main.go)) can be enabled or disabled manually
- `tflint`
> For more information refer to [Terraform documentation](https://github.com/terraform-linters/tflint#getting-started)
- `--no-color` makes the output compatible to plain textlogs such as in Jenkins

## Rules

- No hardcoded secret: `variable` files with password-like names should not have default values set
- Password strength rule:
- Any expression containing password-like elements should evaluate to a string that:
- Is at least 8 characters long
- Contains capital & lower alphabet, digits, and special characters
- Is IP Address '0.0.0.0'
- checks whether URLs use HTTP without TLS (i.e., not HTTPS)
- No Hardcoded Secret: `variable` files with password-like names should not have default values set
- Password Strength:
- Any expression containing password-like elements should evaluate to a string that:
- Is at least 8 characters long
- Contains capital & lower alphabet, digits, and special characters
- Invalid IP Address Binding: checks whether IP Address is '0.0.0.0'
- HTTP without TLS: checks whether URLs use HTTP without TLS (i.e., not HTTPS)

0 comments on commit eabeed5

Please sign in to comment.