Skip to content

Commit 68e3c12

Browse files
committed
Adjusted the test to look for remediation data when provided.
1 parent 43d383a commit 68e3c12

File tree

1 file changed

+11
-1
lines changed

1 file changed

+11
-1
lines changed

unittests/scans/prowler/gcp.json

Lines changed: 11 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,11 @@
2727
"region": "global"
2828
},
2929
"remediation": {
30+
"desc": "To avoid the security risk in using API keys, it is recommended to use standard authentication flow instead.",
31+
"references": [
32+
"gcloud alpha services api-keys delete",
33+
"https://cloud.google.com/docs/authentication/api-keys"
34+
]
3035
},
3136
"risk_details": "Security risks involved in using API-Keys appear below: API keys are simple encrypted strings, API keys do not identify the user or the application making the API request, API keys are typically accessible to clients, making it easy to discover and steal an API key.",
3237
"time": 1739539640,
@@ -62,11 +67,16 @@
6267
"region": "global"
6368
},
6469
"remediation": {
70+
"desc": "Enable vulnerability scanning for images stored in Artifact Registry using AR Container Analysis or a third-party provider.",
71+
"references": [
72+
"gcloud services enable containeranalysis.googleapis.com",
73+
"https://cloud.google.com/artifact-analysis/docs/container-scanning-overview"
74+
]
6575
},
6676
"risk_details": "Without image vulnerability scanning, container images stored in Artifact Registry may contain known vulnerabilities, increasing the risk of exploitation by malicious actors.",
6777
"time": 1739539640,
6878
"time_dt": "2025-02-14T14:27:20.697446",
6979
"type_uid": 200401,
7080
"type_name": "Detection Finding: Create"
7181
}
72-
]
82+
]

0 commit comments

Comments
 (0)