cfn-nag 0.6.1 → 0.6.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a9ce6cd0d3c752291550da0672213d71d1fcd41e8198425c213230303ea8cfb6
-  data.tar.gz: aa57ef3c7b3c2817fc67d5fcf87984ba1d7f90faccc89087842710a5f7f07226
+  metadata.gz: e529710ae1e5a122268d2a85e271e70ba5983833af5d3f14ac56a2178f6d62cb
+  data.tar.gz: 9fcf608bcb2208cea25fcbef7b92de0c9ba8df2a57588c3e230f129d3e2e0f27
 SHA512:
-  metadata.gz: cfa8286dc2e0ed4fbbfa37826557054839abc26080bb15b389c201e6309f2ab22343cc0b1e8380beaf03f6f1732d4eb6adf93a623e788e512ca15b184024bf2a
-  data.tar.gz: 4e756cec00c0e82a08d14f726e212bdcf6b45ae7e37bb3c3160165163367ca7cfcd601e1c95b554f69efe68a398c90848fec198a144dd073f7899e91f2495967
+  metadata.gz: 037bf3ac61698c91b18fff5f53444f734190f862b4b9db7d1e390c66463ded7e6554a7a38d74876f1b442e5fd06cb1d8f30377bc97b60749d7bcf8a98a93c747
+  data.tar.gz: 3af9293f005c8c6f147e9c8a85aa256f0d8193b77ebbfcef7b416a8b52f0459f88f60f35e5f17d38b6d722da43ca9f1b3762d7de36d162602fe6782f8abedf2e

data/lib/cfn-nag/cfn_nag.rb

@@ -102,9 +102,14 @@ class CfnNag
       violations << fatal_violation(error)
     end
 
+    violations = prune_fatal_violations(violations) if @config.ignore_fatal
     audit_result(violations)
   end
 
+  def prune_fatal_violations(violations)
+    violations.reject { |violation| violation.type == Violation::FAILING_VIOLATION }
+  end
+
   def render_results(aggregate_results:,
                      output_format:)
     results_renderer(output_format).new.render(aggregate_results)

data/lib/cfn-nag/cfn_nag_config.rb

@@ -9,6 +9,7 @@ class CfnNagConfig
                  print_suppression: false,
                  isolate_custom_rule_exceptions: false,
                  fail_on_warnings: false,
+                 ignore_fatal: false,
                  rule_repository_definitions: [],
                  rule_arguments: {})
     @rule_directory = rule_directory
@@ -24,6 +25,7 @@ class CfnNagConfig
     @fail_on_warnings = fail_on_warnings
     @rule_repositories = rule_repositories
     @rule_arguments = rule_arguments
+    @ignore_fatal = ignore_fatal
   end
   # rubocop:enable Metrics/ParameterLists
 
@@ -34,4 +36,5 @@ class CfnNagConfig
   attr_reader :blacklist_definition
   attr_reader :fail_on_warnings
   attr_reader :rule_repositories
+  attr_reader :ignore_fatal
 end

data/lib/cfn-nag/cfn_nag_executor.rb

@@ -129,6 +129,7 @@ class CfnNagExecutor
       isolate_custom_rule_exceptions: opts[:isolate_custom_rule_exceptions],
       fail_on_warnings: opts[:fail_on_warnings],
       rule_repository_definitions: @rule_repository_definitions,
+      ignore_fatal: opts[:ignore_fatal],
       rule_arguments: merge_rule_arguments(opts)
     )
   end

data/lib/cfn-nag/cli_options.rb

@@ -100,6 +100,11 @@ class Options
           type: :string,
           required: false,
           default: nil
+      opt :ignore_fatal,
+          'Ignore files with fatal violations.  Useful for ignoring non-Cloudformation yaml/yml/json in a path',
+          type: :boolean,
+          required: false,
+          default: false
     end
   end
 
@@ -193,6 +198,12 @@ class Options
           type: :string,
           required: false,
           default: nil
+      opt :ignore_fatal,
+          'Ignore files with fatal violations.  Useful for ignoring non-Cloudformation yaml/yml/json in a path',
+          short: 'g',
+          type: :boolean,
+          required: false,
+          default: false
     end
   end
   # rubocop:enable Metrics/BlockLength

data/lib/cfn-nag/custom_rules/ApiGatewayV2AccessLoggingRule.rb

@@ -18,7 +18,7 @@ class ApiGatewayV2AccessLoggingRule < BaseRule
 
   def audit_impl(cfn_model)
     violating_deployments = cfn_model.resources_by_type('AWS::ApiGatewayV2::Stage').select do |deployment|
-      deployment.accessLogSetting.nil?
+      deployment.accessLogSettings.nil?
     end
 
     violating_deployments.map(&:logical_resource_id)

data/lib/cfn-nag/custom_rules/SPCMRule.rb

@@ -26,7 +26,10 @@ class SPCMRule < BaseRule
       policy_documents = SPCM.new.metric_impl(cfn_model)
     rescue StandardError => catch_all_exception
       puts "Experimental SPCM rule is failing. Please report #{catch_all_exception} with the violating template"
-      policy_documents = {}
+      policy_documents = {
+        'AWS::IAM::Policy' => {},
+        'AWS::IAM::Role' => {}
+      }
     end
 
     threshold = spcm_threshold.nil? ? DEFAULT_THRESHOLD : spcm_threshold.to_i

data/lib/cfn-nag/iam_complexity_metric/condition_metric.rb

@@ -6,7 +6,6 @@ require 'set'
 class ConditionMetric
   include Weights
 
-  # rubocop:disable Metrics/AbcSize
   def metric(statement)
     return 0 if statement.condition.nil?
 
@@ -18,7 +17,6 @@ class ConditionMetric
     aggregate += values_with_policy_tags(statement.condition)
     aggregate
   end
-  # rubocop:enable Metrics/AbcSize
 
   private
 

data/lib/cfn-nag/result_view/colored_stdout_results.rb

@@ -6,7 +6,6 @@ require 'cfn-nag/violation'
 class ColoredStdoutResults < StdoutResults
   private
 
-  # rubocop:disable Metrics/AbcSize
   def message(message_type:,
               color:,
               message:,
@@ -24,7 +23,6 @@ class ColoredStdoutResults < StdoutResults
     puts colorize(color, '|') unless line_numbers.empty? && logical_resource_ids.nil?
     puts colorize(color, "| #{message}")
   end
-  # rubocop:enable Metrics/AbcSize
 
   def color_code(color_symbol)
     case color_symbol

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cfn-nag
 version: !ruby/object:Gem::Version
-  version: 0.6.1
+  version: 0.6.6
 platform: ruby
 authors:
 - Eric Kascic
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-05-15 00:00:00.000000000 Z
+date: 2020-06-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -72,14 +72,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.5.0
+        version: 0.5.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.5.0
+        version: 0.5.1
 - !ruby/object:Gem::Dependency
   name: logging
   requirement: !ruby/object:Gem::Requirement
@@ -381,7 +381,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.2
+rubygems_version: 3.1.4
 signing_key: 
 specification_version: 4
 summary: cfn-nag