Skip to content

Commit b1b5a45

Browse files
authored
fix(terraform): Changed a couple of checks from negative to positive check, behavior is the same (#6063)
Changed a couple of checks from negative to positive check
1 parent fb26fc2 commit b1b5a45

File tree

2 files changed

+10
-12
lines changed

2 files changed

+10
-12
lines changed

checkov/terraform/checks/resource/azure/StorageAccountDisablePublicAccess.py

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -2,11 +2,11 @@
22

33
from typing import Any
44

5-
from checkov.common.models.enums import CheckCategories, CheckResult
6-
from checkov.terraform.checks.resource.base_resource_negative_value_check import BaseResourceNegativeValueCheck
5+
from checkov.common.models.enums import CheckCategories
6+
from checkov.terraform.checks.resource.base_resource_value_check import BaseResourceValueCheck
77

88

9-
class StorageAccountDisablePublicAccess(BaseResourceNegativeValueCheck):
9+
class StorageAccountDisablePublicAccess(BaseResourceValueCheck):
1010
def __init__(self) -> None:
1111
name = "Ensure that Storage accounts disallow public access"
1212
id = "CKV_AZURE_59"
@@ -17,14 +17,13 @@ def __init__(self) -> None:
1717
id=id,
1818
categories=categories,
1919
supported_resources=supported_resources,
20-
missing_attribute_result=CheckResult.FAILED,
2120
)
2221

2322
def get_inspected_key(self) -> str:
2423
return "public_network_access_enabled"
2524

26-
def get_forbidden_values(self) -> list[Any]:
27-
return [True]
25+
def get_expected_values(self) -> list[Any]:
26+
return [False]
2827

2928

3029
check = StorageAccountDisablePublicAccess()

checkov/terraform/checks/resource/azure/StorageBlobRestrictPublicAccess.py

Lines changed: 5 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -2,11 +2,11 @@
22

33
from typing import Any
44

5-
from checkov.common.models.enums import CheckCategories, CheckResult
6-
from checkov.terraform.checks.resource.base_resource_negative_value_check import BaseResourceNegativeValueCheck
5+
from checkov.common.models.enums import CheckCategories
6+
from checkov.terraform.checks.resource.base_resource_value_check import BaseResourceValueCheck
77

88

9-
class StorageBlobRestrictPublicAccess(BaseResourceNegativeValueCheck):
9+
class StorageBlobRestrictPublicAccess(BaseResourceValueCheck):
1010
def __init__(self) -> None:
1111
name = "Ensure that Storage blobs restrict public access"
1212
id = "CKV_AZURE_190"
@@ -17,14 +17,13 @@ def __init__(self) -> None:
1717
id=id,
1818
categories=categories,
1919
supported_resources=supported_resources,
20-
missing_attribute_result=CheckResult.FAILED,
2120
)
2221

2322
def get_inspected_key(self) -> str:
2423
return "allow_nested_items_to_be_public"
2524

26-
def get_forbidden_values(self) -> list[Any]:
27-
return [True]
25+
def get_expected_values(self) -> list[Any]:
26+
return [False]
2827

2928

3029
check = StorageBlobRestrictPublicAccess()

0 commit comments

Comments
 (0)