feat(misconf): export unresolvable field of IaC types to Rego (#7765)

Signed-off-by: nikpivkin <[email protected]>
aquasecurity · Oct 21, 2024 · 9514148 · 9514148
1 parent 010b213
commit 9514148
Show file tree

Hide file tree

Showing 5 changed files with 29 additions and 0 deletions.
diff --git a/pkg/iac/rego/convert/slice_test.go b/pkg/iac/rego/convert/slice_test.go
@@ -38,6 +38,7 @@ func Test_SliceTypesConversion(t *testing.T) {
  "endline": 123,
  "sourceprefix": "",
  "managed": true,
+ "unresolvable": false,
  "explicit": false,
  "fskey": "",
  "resource": "",
@@ -49,6 +50,7 @@ func Test_SliceTypesConversion(t *testing.T) {
  "endline": 123,
  "sourceprefix": "",
  "managed": true,
+ "unresolvable": false,
  "explicit": false,
  "fskey": "",
  "resource": "",

diff --git a/pkg/iac/rego/schemas/cloud.json b/pkg/iac/rego/schemas/cloud.json
@@ -7884,6 +7884,9 @@
  "startline": {
  "type": "integer"
  },
+ "unresolvable": {
+ "type": "boolean"
+ },
  "value": {
  "type": "boolean"
  }
@@ -7916,6 +7919,9 @@
  "startline": {
  "type": "integer"
  },
+ "unresolvable": {
+ "type": "boolean"
+ },
  "value": {
  "type": "string"
  }
@@ -7948,6 +7954,9 @@
  "startline": {
  "type": "integer"
  },
+ "unresolvable": {
+ "type": "boolean"
+ },
  "value": {
  "type": "integer"
  }
@@ -7980,6 +7989,9 @@
  "startline": {
  "type": "integer"
  },
+ "unresolvable": {
+ "type": "boolean"
+ },
  "value": {
  "type": "object"
  }
@@ -8011,6 +8023,9 @@
  },
  "startline": {
  "type": "integer"
+ },
+ "unresolvable": {
+ "type": "boolean"
  }
  }
  },
@@ -8041,6 +8056,9 @@
  "startline": {
  "type": "integer"
  },
+ "unresolvable": {
+ "type": "boolean"
+ },
  "value": {
  "type": "string"
  }
@@ -8073,6 +8091,9 @@
  "startline": {
  "type": "integer"
  },
+ "unresolvable": {
+ "type": "boolean"
+ },
  "value": {
  "type": "string"
  }

diff --git a/pkg/iac/state/state_test.go b/pkg/iac/state/state_test.go
@@ -44,6 +44,7 @@ func Test_RegoConversion(t *testing.T) {
  "startline": 2,
  "endline": 4,
  "managed": true,
+ "unresolvable": false,
  "explicit": false,
  "fskey": "",
  },
@@ -55,6 +56,7 @@ func Test_RegoConversion(t *testing.T) {
  "endline": 3,
  "value": "my-bucket",
  "managed": true,
+ "unresolvable": false,
  "explicit": false,
  "fskey": "",
  },

diff --git a/pkg/iac/types/metadata.go b/pkg/iac/types/metadata.go
@@ -84,6 +84,7 @@ func (m *Metadata) ToRego() any {
  "sourceprefix": m.Range().GetSourcePrefix(),
  "managed": m.isManaged,
  "explicit": m.isExplicit,
+ "unresolvable": m.isUnresolvable,
  "fskey": CreateFSKey(m.Range().GetFS()),
  "resource": m.Reference(),
  }

diff --git a/pkg/iac/types/metadata_test.go b/pkg/iac/types/metadata_test.go
@@ -8,12 +8,14 @@ import (
 
 func Test_MetadataToRego(t *testing.T) {
  m1 := NewTestMetadata()
+ m1.isUnresolvable = true
  expected := map[string]any{
  "endline": 123,
  "explicit": false,
  "filepath": "test.test",
  "fskey": "",
  "managed": true,
+ "unresolvable": true,
  "resource": "",
  "sourceprefix": "",
  "startline": 123,
@@ -27,6 +29,7 @@ func Test_MetadataToRego(t *testing.T) {
  "filepath": "test.test",
  "fskey": "",
  "managed": true,
+ "unresolvable": false,
  "resource": "",
  "sourceprefix": "",
  "startline": 123,