feat(misconf): export unresolvable field of IaC types to Rego (#7765)

Signed-off-by: nikpivkin <[email protected]>
aquasecurity · Oct 21, 2024 · 9514148 · 9514148
1 parent 010b213
commit 9514148
Show file tree

Hide file tree

Showing 5 changed files with 29 additions and 0 deletions.
diff --git a/pkg/iac/rego/convert/slice_test.go b/pkg/iac/rego/convert/slice_test.go
@@ -38,6 +38,7 @@ func Test_SliceTypesConversion(t *testing.T) {
 			"endline":      123,
 			"sourceprefix": "",
 			"managed":      true,
+			"unresolvable": false,
 			"explicit":     false,
 			"fskey":        "",
 			"resource":     "",
@@ -49,6 +50,7 @@ func Test_SliceTypesConversion(t *testing.T) {
 			"endline":      123,
 			"sourceprefix": "",
 			"managed":      true,
+			"unresolvable": false,
 			"explicit":     false,
 			"fskey":        "",
 			"resource":     "",

diff --git a/pkg/iac/rego/schemas/cloud.json b/pkg/iac/rego/schemas/cloud.json
@@ -7884,6 +7884,9 @@
         "startline": {
           "type": "integer"
         },
+        "unresolvable": {
+          "type": "boolean"
+        },
         "value": {
           "type": "boolean"
         }
@@ -7916,6 +7919,9 @@
         "startline": {
           "type": "integer"
         },
+        "unresolvable": {
+          "type": "boolean"
+        },
         "value": {
           "type": "string"
         }
@@ -7948,6 +7954,9 @@
         "startline": {
           "type": "integer"
         },
+        "unresolvable": {
+          "type": "boolean"
+        },
         "value": {
           "type": "integer"
         }
@@ -7980,6 +7989,9 @@
         "startline": {
           "type": "integer"
         },
+        "unresolvable": {
+          "type": "boolean"
+        },
         "value": {
           "type": "object"
         }
@@ -8011,6 +8023,9 @@
         },
         "startline": {
           "type": "integer"
+        },
+        "unresolvable": {
+          "type": "boolean"
         }
       }
     },
@@ -8041,6 +8056,9 @@
         "startline": {
           "type": "integer"
         },
+        "unresolvable": {
+          "type": "boolean"
+        },
         "value": {
           "type": "string"
         }
@@ -8073,6 +8091,9 @@
         "startline": {
           "type": "integer"
         },
+        "unresolvable": {
+          "type": "boolean"
+        },
         "value": {
           "type": "string"
         }

diff --git a/pkg/iac/state/state_test.go b/pkg/iac/state/state_test.go
@@ -44,6 +44,7 @@ func Test_RegoConversion(t *testing.T) {
 							"startline":    2,
 							"endline":      4,
 							"managed":      true,
+							"unresolvable": false,
 							"explicit":     false,
 							"fskey":        "",
 						},
@@ -55,6 +56,7 @@ func Test_RegoConversion(t *testing.T) {
 							"endline":      3,
 							"value":        "my-bucket",
 							"managed":      true,
+							"unresolvable": false,
 							"explicit":     false,
 							"fskey":        "",
 						},

diff --git a/pkg/iac/types/metadata.go b/pkg/iac/types/metadata.go
@@ -84,6 +84,7 @@ func (m *Metadata) ToRego() any {
 		"sourceprefix": m.Range().GetSourcePrefix(),
 		"managed":      m.isManaged,
 		"explicit":     m.isExplicit,
+		"unresolvable": m.isUnresolvable,
 		"fskey":        CreateFSKey(m.Range().GetFS()),
 		"resource":     m.Reference(),
 	}

diff --git a/pkg/iac/types/metadata_test.go b/pkg/iac/types/metadata_test.go
@@ -8,12 +8,14 @@ import (
 
 func Test_MetadataToRego(t *testing.T) {
 	m1 := NewTestMetadata()
+	m1.isUnresolvable = true
 	expected := map[string]any{
 		"endline":      123,
 		"explicit":     false,
 		"filepath":     "test.test",
 		"fskey":        "",
 		"managed":      true,
+		"unresolvable": true,
 		"resource":     "",
 		"sourceprefix": "",
 		"startline":    123,
@@ -27,6 +29,7 @@ func Test_MetadataToRego(t *testing.T) {
 		"filepath":     "test.test",
 		"fskey":        "",
 		"managed":      true,
+		"unresolvable": false,
 		"resource":     "",
 		"sourceprefix": "",
 		"startline":    123,