Merge pull request #7167 from Checkmarx/AST-45283-googleDM

update(query): add cwe infos to Google Deployment Manager queries
Checkmarx · Sep 19, 2024 · 507e983 · 507e983
2 parents 32cffc7 + b736928
commit 507e983
Show file tree

Hide file tree

Showing 35 changed files with 36 additions and 36 deletions.
diff --git a/assets/queries/googleDeploymentManager/gcp/bigquery_database_is_public/metadata.json b/assets/queries/googleDeploymentManager/gcp/bigquery_database_is_public/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "6737ca8f",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "732"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/bucket_without_versioning/metadata.json b/assets/queries/googleDeploymentManager/gcp/bucket_without_versioning/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "97c49cde",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "280"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/client_certificate_disabled/metadata.json b/assets/queries/googleDeploymentManager/gcp/client_certificate_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "e74562aa",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "1188"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/cloud_dns_without_dnnsec/metadata.json b/assets/queries/googleDeploymentManager/gcp/cloud_dns_without_dnnsec/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "d926ffb6",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "353"
 }
diff --git a/.../googleDeploymentManager/gcp/cloud_storage_anonymous_or_publicly_accessible/metadata.json b/.../googleDeploymentManager/gcp/cloud_storage_anonymous_or_publicly_accessible/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "2146c969",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "1188",
   "oldSeverity": "HIGH"
 }
diff --git a/...ies/googleDeploymentManager/gcp/cloud_storage_bucket_is_publicly_accessible/metadata.json b/...ies/googleDeploymentManager/gcp/cloud_storage_bucket_is_publicly_accessible/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "f767772d",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "1188",
   "oldSeverity": "HIGH"
 }
diff --git a/...ueries/googleDeploymentManager/gcp/cloud_storage_bucket_versioning_disabled/metadata.json b/...ueries/googleDeploymentManager/gcp/cloud_storage_bucket_versioning_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "9b7ba7de",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "1357",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/cluster_labels_disabled/metadata.json b/assets/queries/googleDeploymentManager/gcp/cluster_labels_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "8c094804",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "1188",
   "oldSeverity": "HIGH"
 }
diff --git a/.../queries/googleDeploymentManager/gcp/cluster_master_authentication_disabled/metadata.json b/.../queries/googleDeploymentManager/gcp/cluster_master_authentication_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "4a9cd0c6",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "1188",
   "oldSeverity": "HIGH"
 }
diff --git a/...queries/googleDeploymentManager/gcp/compute_instance_is_publicly_accessible/metadata.json b/...queries/googleDeploymentManager/gcp/compute_instance_is_publicly_accessible/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "9f60c421",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "284",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/cos_node_image_not_used/metadata.json b/assets/queries/googleDeploymentManager/gcp/cos_node_image_not_used/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "5915a575",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "1188",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/disk_encryption_disabled/metadata.json b/assets/queries/googleDeploymentManager/gcp/disk_encryption_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "107eb8fb",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "326"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/dnssec_using_rsasha1/metadata.json b/assets/queries/googleDeploymentManager/gcp/dnssec_using_rsasha1/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "7f322f20",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "326",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/gke_legacy_authorization_enabled/metadata.json b/assets/queries/googleDeploymentManager/gcp/gke_legacy_authorization_enabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "3de820a0",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "285"
 }
diff --git a/...queries/googleDeploymentManager/gcp/gke_master_authorized_networks_disabled/metadata.json b/...queries/googleDeploymentManager/gcp/gke_master_authorized_networks_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "be3364b4",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "284",
   "oldSeverity": "HIGH"
 }
diff --git a/...ies/googleDeploymentManager/gcp/google_storage_bucket_level_access_disabled/metadata.json b/...ies/googleDeploymentManager/gcp/google_storage_bucket_level_access_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "d9594b64",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "1357",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/ip_aliasing_disabled/metadata.json b/assets/queries/googleDeploymentManager/gcp/ip_aliasing_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "34473a24",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "1188",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/ip_forwarding_enabled/metadata.json b/assets/queries/googleDeploymentManager/gcp/ip_forwarding_enabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "dc6dbaa9",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "1188"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/mysql_instance_with_local_infile_on/metadata.json b/assets/queries/googleDeploymentManager/gcp/mysql_instance_with_local_infile_on/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "66f8ba25",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "119"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/network_policy_disabled/metadata.json b/assets/queries/googleDeploymentManager/gcp/network_policy_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "e28f5312",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "1188",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/node_auto_upgrade_disabled/metadata.json b/assets/queries/googleDeploymentManager/gcp/node_auto_upgrade_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "40051d4a",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "1188",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/not_proper_email_account_in_use/metadata.json b/assets/queries/googleDeploymentManager/gcp/not_proper_email_account_in_use/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "a21b8df4",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "668",
   "oldSeverity": "HIGH"
 }
diff --git a/...ts/queries/googleDeploymentManager/gcp/os_login_is_disabled_for_vm_instance/metadata.json b/...ts/queries/googleDeploymentManager/gcp/os_login_is_disabled_for_vm_instance/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "0908cbc4",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "287"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/private_cluster_disabled/metadata.json b/assets/queries/googleDeploymentManager/gcp/private_cluster_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "c65a868d",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "295",
   "oldSeverity": "HIGH"
 }
diff --git a/...ogleDeploymentManager/gcp/project_wide_ssh_keys_are_enabled_in_vm_instances/metadata.json b/...ogleDeploymentManager/gcp/project_wide_ssh_keys_are_enabled_in_vm_instances/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "5e36c46d",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "799"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/rdp_access_is_not_restricted/metadata.json b/assets/queries/googleDeploymentManager/gcp/rdp_access_is_not_restricted/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "cae2eeea",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "285",
   "oldSeverity": "MEDIUM"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/shielded_vm_disabled/metadata.json b/assets/queries/googleDeploymentManager/gcp/shielded_vm_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "c67722e8",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "1188"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/sql_db_instance_backup_disabled/metadata.json b/assets/queries/googleDeploymentManager/gcp/sql_db_instance_backup_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "45790b7e",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "497",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/sql_db_instance_with_ssl_disabled/metadata.json b/assets/queries/googleDeploymentManager/gcp/sql_db_instance_with_ssl_disabled/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "b42ee5a9",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "319"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/ssh_access_is_not_restricted/metadata.json b/assets/queries/googleDeploymentManager/gcp/ssh_access_is_not_restricted/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "10629ac9",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "284"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp/stackdriver_logging_disabled/metadata.json b/assets/queries/googleDeploymentManager/gcp/stackdriver_logging_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "ba92577c",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "778",
   "oldSeverity": "HIGH"
-}
+}
diff --git a/assets/queries/googleDeploymentManager/gcp/stackdriver_monitoring_disabled/metadata.json b/assets/queries/googleDeploymentManager/gcp/stackdriver_monitoring_disabled/metadata.json
@@ -8,6 +8,6 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "c1eb34ef",
   "cloudProvider": "gcp",
-  "cwe": "",
+  "cwe": "732",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp_bom/pd/metadata.json b/assets/queries/googleDeploymentManager/gcp_bom/pd/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "3db91dc6",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "200"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp_bom/pst/metadata.json b/assets/queries/googleDeploymentManager/gcp_bom/pst/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "e96debd4",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "200"
 }
diff --git a/assets/queries/googleDeploymentManager/gcp_bom/sb/metadata.json b/assets/queries/googleDeploymentManager/gcp_bom/sb/metadata.json
@@ -8,5 +8,5 @@
   "platform": "GoogleDeploymentManager",
   "descriptionID": "7f40edaa",
   "cloudProvider": "gcp",
-  "cwe": ""
+  "cwe": "200"
 }