puppet-lint-infrasecure 1.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (64) hide show
  1. checksums.yaml +7 -0
  2. data/README.md +81 -0
  3. data/lib/puppet-lint/linter.rb +132 -0
  4. data/lib/puppet-lint/plugins/check_admin_by_default.rb +26 -0
  5. data/lib/puppet-lint/plugins/check_cyrillic_homograph_attack.rb +19 -0
  6. data/lib/puppet-lint/plugins/check_empty_password.rb +26 -0
  7. data/lib/puppet-lint/plugins/check_hard_coded_secret.rb +31 -0
  8. data/lib/puppet-lint/plugins/check_invalid_ip_addr_binding.rb +23 -0
  9. data/lib/puppet-lint/plugins/check_malicious_dependency.rb +24 -0
  10. data/lib/puppet-lint/plugins/check_suspicious_comment.rb +19 -0
  11. data/lib/puppet-lint/plugins/check_use_http_without_tls.rb +27 -0
  12. data/lib/puppet-lint/plugins/check_use_of_weak_crypto_algorithm.rb +21 -0
  13. data/lib/puppet-lint/plugins/check_weak_password.rb +27 -0
  14. data/lib/puppet-lint-infrasecure/config/dependencies.yml +33 -0
  15. data/lib/puppet-lint-infrasecure/config/whitelist +19 -0
  16. data/lib/puppet-lint-infrasecure/dependencies/activemq.json +407 -0
  17. data/lib/puppet-lint-infrasecure/dependencies/apt.json +453 -0
  18. data/lib/puppet-lint-infrasecure/dependencies/cassandra.json +122 -0
  19. data/lib/puppet-lint-infrasecure/dependencies/docker.json +200 -0
  20. data/lib/puppet-lint-infrasecure/dependencies/elasticsearch.json +32 -0
  21. data/lib/puppet-lint-infrasecure/dependencies/gitlab.json +1161 -0
  22. data/lib/puppet-lint-infrasecure/dependencies/grafana.json +31 -0
  23. data/lib/puppet-lint-infrasecure/dependencies/haproxy.json +159 -0
  24. data/lib/puppet-lint-infrasecure/dependencies/jenkins.json +876 -0
  25. data/lib/puppet-lint-infrasecure/dependencies/jira.json +460 -0
  26. data/lib/puppet-lint-infrasecure/dependencies/kafka.json +32 -0
  27. data/lib/puppet-lint-infrasecure/dependencies/kubernetes.json +123 -0
  28. data/lib/puppet-lint-infrasecure/dependencies/mongodb.json +156 -0
  29. data/lib/puppet-lint-infrasecure/dependencies/mysql.json +14549 -0
  30. data/lib/puppet-lint-infrasecure/dependencies/nagios_core.json +8 -0
  31. data/lib/puppet-lint-infrasecure/dependencies/nginx.json +1322 -0
  32. data/lib/puppet-lint-infrasecure/dependencies/nodejs.json +247 -0
  33. data/lib/puppet-lint-infrasecure/dependencies/ntp.json +2163 -0
  34. data/lib/puppet-lint-infrasecure/dependencies/openstack.json +447 -0
  35. data/lib/puppet-lint-infrasecure/dependencies/openvpn.json +816 -0
  36. data/lib/puppet-lint-infrasecure/dependencies/postgresql.json +4256 -0
  37. data/lib/puppet-lint-infrasecure/dependencies/puppet_agent.json +23 -0
  38. data/lib/puppet-lint-infrasecure/dependencies/python.json +1134 -0
  39. data/lib/puppet-lint-infrasecure/dependencies/rabbitmq.json +602 -0
  40. data/lib/puppet-lint-infrasecure/dependencies/redis.json +51 -0
  41. data/lib/puppet-lint-infrasecure/dependencies/ruby.json +487 -0
  42. data/lib/puppet-lint-infrasecure/dependencies/sqlite.json +52 -0
  43. data/lib/puppet-lint-infrasecure/dependencies/systemd.json +180 -0
  44. data/lib/puppet-lint-infrasecure/dependencies/tomcat.json +8635 -0
  45. data/lib/puppet-lint-infrasecure/dependencies/vault.json +14 -0
  46. data/lib/puppet-lint-infrasecure/dependencies/wget.json +129 -0
  47. data/lib/puppet-lint-infrasecure/dependencies/yum.json +14 -0
  48. data/lib/puppet-lint-infrasecure/dependencies/zabbix.json +940 -0
  49. data/lib/puppet-lint-infrasecure/regex.rb +18 -0
  50. data/lib/puppet-lint-infrasecure/rules.rb +51 -0
  51. data/lib/puppet-lint-infrasecure/version.rb +3 -0
  52. data/lib/puppet-lint-infrasecure.rb +62 -0
  53. data/spec/puppet-lint/plugins/check_admin_by_default_spec.rb +34 -0
  54. data/spec/puppet-lint/plugins/check_cyrillic_homograph_attack_spec.rb +22 -0
  55. data/spec/puppet-lint/plugins/check_empty_password_spec.rb +55 -0
  56. data/spec/puppet-lint/plugins/check_hard_coded_secret_spec.rb +53 -0
  57. data/spec/puppet-lint/plugins/check_invalid_ip_addr_binding_spec.rb +46 -0
  58. data/spec/puppet-lint/plugins/check_malicious_dependency_spec.rb +39 -0
  59. data/spec/puppet-lint/plugins/check_suspicious_comment_spec.rb +50 -0
  60. data/spec/puppet-lint/plugins/check_use_http_without_tls_spec.rb +100 -0
  61. data/spec/puppet-lint/plugins/check_use_of_weak_crypto_algorithm_spec.rb +42 -0
  62. data/spec/puppet-lint/plugins/check_weak_password_spec.rb +29 -0
  63. data/spec/spec_helper.rb +3 -0
  64. metadata +284 -0
data/lib/puppet-lint-infrasecure/dependencies/openstack.json ADDED
@@ -0,0 +1,447 @@
1
+ {
2
+ "16.1": [
3
+ "CVE-2021-31918",
4
+ "CVE-2016-2124",
5
+ "CVE-2020-14355",
6
+ "CVE-2020-25717"
7
+ ],
8
+ "10": [
9
+ "CVE-2021-3930",
10
+ "CVE-2017-10664",
11
+ "CVE-2017-15139",
12
+ "CVE-2017-18191",
13
+ "CVE-2017-2615",
14
+ "CVE-2017-2620",
15
+ "CVE-2017-2621",
16
+ "CVE-2017-2622",
17
+ "CVE-2017-2627",
18
+ "CVE-2017-2637",
19
+ "CVE-2017-2673",
20
+ "CVE-2017-5973",
21
+ "CVE-2017-7466",
22
+ "CVE-2017-7481",
23
+ "CVE-2017-7539",
24
+ "CVE-2017-7543",
25
+ "CVE-2017-7980",
26
+ "CVE-2017-8309",
27
+ "CVE-2017-8379",
28
+ "CVE-2017-9214",
29
+ "CVE-2016-2121",
30
+ "CVE-2016-4020",
31
+ "CVE-2016-6888",
32
+ "CVE-2016-7422",
33
+ "CVE-2016-7466",
34
+ "CVE-2016-8576",
35
+ "CVE-2016-8669",
36
+ "CVE-2016-8909",
37
+ "CVE-2016-8910",
38
+ "CVE-2016-9590",
39
+ "CVE-2016-9599",
40
+ "CVE-2016-9603",
41
+ "CVE-2016-9907",
42
+ "CVE-2016-9911",
43
+ "CVE-2016-9921",
44
+ "CVE-2020-10684",
45
+ "CVE-2020-10685",
46
+ "CVE-2020-14364",
47
+ "CVE-2020-1711",
48
+ "CVE-2020-1758",
49
+ "CVE-2020-27827",
50
+ "CVE-2019-10141",
51
+ "CVE-2019-10192",
52
+ "CVE-2019-10193",
53
+ "CVE-2019-14818",
54
+ "CVE-2019-14859",
55
+ "CVE-2019-14900",
56
+ "CVE-2019-3830",
57
+ "CVE-2019-9735",
58
+ "CVE-2018-1000115",
59
+ "CVE-2018-1000127",
60
+ "CVE-2018-1059",
61
+ "CVE-2018-10855",
62
+ "CVE-2018-10874",
63
+ "CVE-2018-10875",
64
+ "CVE-2018-11218",
65
+ "CVE-2018-11219",
66
+ "CVE-2018-11806",
67
+ "CVE-2018-14432",
68
+ "CVE-2018-14635",
69
+ "CVE-2018-17204",
70
+ "CVE-2018-17205",
71
+ "CVE-2018-17206",
72
+ "CVE-2018-17963",
73
+ "CVE-2018-18438",
74
+ "CVE-2018-3639",
75
+ "CVE-2018-7536"
76
+ ],
77
+ "13": [
78
+ "CVE-2021-3930",
79
+ "CVE-2017-10906",
80
+ "CVE-2017-15139",
81
+ "CVE-2016-2124",
82
+ "CVE-2020-10684",
83
+ "CVE-2020-10685",
84
+ "CVE-2020-10711",
85
+ "CVE-2020-10756",
86
+ "CVE-2020-14364",
87
+ "CVE-2020-1711",
88
+ "CVE-2020-1733",
89
+ "CVE-2020-1735",
90
+ "CVE-2020-1736",
91
+ "CVE-2020-1738",
92
+ "CVE-2020-1739",
93
+ "CVE-2020-1740",
94
+ "CVE-2020-25717",
95
+ "CVE-2020-27827",
96
+ "CVE-2019-10141",
97
+ "CVE-2019-10156",
98
+ "CVE-2019-10192",
99
+ "CVE-2019-10193",
100
+ "CVE-2019-10876",
101
+ "CVE-2019-14846",
102
+ "CVE-2019-14856",
103
+ "CVE-2019-14859",
104
+ "CVE-2019-14900",
105
+ "CVE-2019-14905",
106
+ "CVE-2019-9735",
107
+ "CVE-2018-1000807",
108
+ "CVE-2018-1000808",
109
+ "CVE-2018-10237",
110
+ "CVE-2018-10855",
111
+ "CVE-2018-10874",
112
+ "CVE-2018-10875",
113
+ "CVE-2018-10898",
114
+ "CVE-2018-10899",
115
+ "CVE-2018-10903",
116
+ "CVE-2018-10915",
117
+ "CVE-2018-11218",
118
+ "CVE-2018-11219",
119
+ "CVE-2018-11806",
120
+ "CVE-2018-14432",
121
+ "CVE-2018-14620",
122
+ "CVE-2018-14635",
123
+ "CVE-2018-16856",
124
+ "CVE-2018-17204",
125
+ "CVE-2018-17205",
126
+ "CVE-2018-17206",
127
+ "CVE-2018-17963",
128
+ "CVE-2018-18438",
129
+ "CVE-2018-3639",
130
+ "CVE-2018-7536"
131
+ ],
132
+ "6.0": [
133
+ "CVE-2017-10664",
134
+ "CVE-2017-2615",
135
+ "CVE-2017-2620",
136
+ "CVE-2017-5973",
137
+ "CVE-2017-7539",
138
+ "CVE-2017-7980",
139
+ "CVE-2017-8309",
140
+ "CVE-2017-8379",
141
+ "CVE-2017-9214",
142
+ "CVE-2016-1568",
143
+ "CVE-2016-2857",
144
+ "CVE-2016-3710",
145
+ "CVE-2016-4020",
146
+ "CVE-2016-4428",
147
+ "CVE-2016-5126",
148
+ "CVE-2016-5403",
149
+ "CVE-2016-6662",
150
+ "CVE-2016-6888",
151
+ "CVE-2016-7422",
152
+ "CVE-2016-7466",
153
+ "CVE-2016-8576",
154
+ "CVE-2016-8669",
155
+ "CVE-2016-8909",
156
+ "CVE-2016-8910",
157
+ "CVE-2016-9603",
158
+ "CVE-2016-9907",
159
+ "CVE-2016-9911",
160
+ "CVE-2016-9921",
161
+ "CVE-2008-7313",
162
+ "CVE-2012-6685",
163
+ "CVE-2015-0271",
164
+ "CVE-2015-3214",
165
+ "CVE-2015-3456",
166
+ "CVE-2015-5165",
167
+ "CVE-2015-5225",
168
+ "CVE-2015-6815",
169
+ "CVE-2014-5008",
170
+ "CVE-2014-5009"
171
+ ],
172
+ "7.0": [
173
+ "CVE-2017-10664",
174
+ "CVE-2017-2615",
175
+ "CVE-2017-2620",
176
+ "CVE-2017-2637",
177
+ "CVE-2017-5973",
178
+ "CVE-2017-7539",
179
+ "CVE-2017-7980",
180
+ "CVE-2017-8309",
181
+ "CVE-2017-8379",
182
+ "CVE-2017-9214",
183
+ "CVE-2016-1568",
184
+ "CVE-2016-2857",
185
+ "CVE-2016-3710",
186
+ "CVE-2016-4020",
187
+ "CVE-2016-4428",
188
+ "CVE-2016-4474",
189
+ "CVE-2016-4985",
190
+ "CVE-2016-5126",
191
+ "CVE-2016-5403",
192
+ "CVE-2016-6519",
193
+ "CVE-2016-6662",
194
+ "CVE-2016-6888",
195
+ "CVE-2016-7103",
196
+ "CVE-2016-7422",
197
+ "CVE-2016-7466",
198
+ "CVE-2016-8576",
199
+ "CVE-2016-8669",
200
+ "CVE-2016-8909",
201
+ "CVE-2016-8910",
202
+ "CVE-2016-9603",
203
+ "CVE-2016-9907",
204
+ "CVE-2016-9911",
205
+ "CVE-2016-9921",
206
+ "CVE-2015-3456",
207
+ "CVE-2015-5225",
208
+ "CVE-2015-5271",
209
+ "CVE-2015-5295",
210
+ "CVE-2015-5329",
211
+ "CVE-2015-5741",
212
+ "CVE-2015-6815",
213
+ "CVE-2018-3639"
214
+ ],
215
+ "8": [
216
+ "CVE-2017-10664",
217
+ "CVE-2017-2615",
218
+ "CVE-2017-2620",
219
+ "CVE-2017-2637",
220
+ "CVE-2017-5973",
221
+ "CVE-2017-7539",
222
+ "CVE-2017-7543",
223
+ "CVE-2017-7980",
224
+ "CVE-2017-8309",
225
+ "CVE-2017-8379",
226
+ "CVE-2017-9214",
227
+ "CVE-2016-2857",
228
+ "CVE-2016-3710",
229
+ "CVE-2016-4020",
230
+ "CVE-2016-4428",
231
+ "CVE-2016-4474",
232
+ "CVE-2016-4985",
233
+ "CVE-2016-5126",
234
+ "CVE-2016-5403",
235
+ "CVE-2016-6519",
236
+ "CVE-2016-6662",
237
+ "CVE-2016-6888",
238
+ "CVE-2016-7103",
239
+ "CVE-2016-7422",
240
+ "CVE-2016-7466",
241
+ "CVE-2016-8576",
242
+ "CVE-2016-8669",
243
+ "CVE-2016-8909",
244
+ "CVE-2016-8910",
245
+ "CVE-2016-9590",
246
+ "CVE-2016-9603",
247
+ "CVE-2016-9907",
248
+ "CVE-2016-9911",
249
+ "CVE-2016-9921",
250
+ "CVE-2015-5741",
251
+ "CVE-2018-1000115",
252
+ "CVE-2018-1059",
253
+ "CVE-2018-11806",
254
+ "CVE-2018-18438",
255
+ "CVE-2018-3639"
256
+ ],
257
+ "9": [
258
+ "CVE-2017-10664",
259
+ "CVE-2017-18191",
260
+ "CVE-2017-2615",
261
+ "CVE-2017-2620",
262
+ "CVE-2017-2621",
263
+ "CVE-2017-2637",
264
+ "CVE-2017-2673",
265
+ "CVE-2017-5973",
266
+ "CVE-2017-7539",
267
+ "CVE-2017-7543",
268
+ "CVE-2017-7980",
269
+ "CVE-2017-8309",
270
+ "CVE-2017-8379",
271
+ "CVE-2017-9214",
272
+ "CVE-2016-2857",
273
+ "CVE-2016-4020",
274
+ "CVE-2016-5126",
275
+ "CVE-2016-5403",
276
+ "CVE-2016-6519",
277
+ "CVE-2016-6662",
278
+ "CVE-2016-6888",
279
+ "CVE-2016-7103",
280
+ "CVE-2016-7422",
281
+ "CVE-2016-7466",
282
+ "CVE-2016-8576",
283
+ "CVE-2016-8669",
284
+ "CVE-2016-8909",
285
+ "CVE-2016-8910",
286
+ "CVE-2016-9590",
287
+ "CVE-2016-9603",
288
+ "CVE-2016-9907",
289
+ "CVE-2016-9911",
290
+ "CVE-2016-9921",
291
+ "CVE-2019-10192",
292
+ "CVE-2019-10193",
293
+ "CVE-2018-1000115",
294
+ "CVE-2018-1059",
295
+ "CVE-2018-11806",
296
+ "CVE-2018-18438",
297
+ "CVE-2018-3639"
298
+ ],
299
+ "11": [
300
+ "CVE-2017-10664",
301
+ "CVE-2017-2627",
302
+ "CVE-2017-5973",
303
+ "CVE-2017-7466",
304
+ "CVE-2017-7481",
305
+ "CVE-2017-7539",
306
+ "CVE-2017-7543",
307
+ "CVE-2017-8309",
308
+ "CVE-2017-8379",
309
+ "CVE-2017-9214",
310
+ "CVE-2016-4020",
311
+ "CVE-2016-6888",
312
+ "CVE-2016-7422",
313
+ "CVE-2016-7466",
314
+ "CVE-2016-8576",
315
+ "CVE-2016-8669",
316
+ "CVE-2016-8909",
317
+ "CVE-2016-8910",
318
+ "CVE-2016-9587",
319
+ "CVE-2016-9907",
320
+ "CVE-2016-9911",
321
+ "CVE-2016-9921",
322
+ "CVE-2018-1000115",
323
+ "CVE-2018-1059"
324
+ ],
325
+ "07132017": [
326
+ "CVE-2017-12440"
327
+ ],
328
+ "12": [
329
+ "CVE-2017-18191",
330
+ "CVE-2017-3636",
331
+ "CVE-2017-3641",
332
+ "CVE-2019-3895",
333
+ "CVE-2018-1000115",
334
+ "CVE-2018-1059",
335
+ "CVE-2018-10855",
336
+ "CVE-2018-10874",
337
+ "CVE-2018-10875",
338
+ "CVE-2018-10892",
339
+ "CVE-2018-10915",
340
+ "CVE-2018-11806",
341
+ "CVE-2018-14432",
342
+ "CVE-2018-14620",
343
+ "CVE-2018-14635",
344
+ "CVE-2018-16856",
345
+ "CVE-2018-18438",
346
+ "CVE-2018-2813",
347
+ "CVE-2018-2817",
348
+ "CVE-2018-3639"
349
+ ],
350
+ "5.0": [
351
+ "CVE-2017-2615",
352
+ "CVE-2017-2620",
353
+ "CVE-2016-1714",
354
+ "CVE-2016-3710",
355
+ "CVE-2016-5403",
356
+ "CVE-2016-6662",
357
+ "CVE-2016-9603",
358
+ "CVE-2008-7313",
359
+ "CVE-2015-0271",
360
+ "CVE-2015-3214",
361
+ "CVE-2015-3456",
362
+ "CVE-2015-5165",
363
+ "CVE-2015-5225",
364
+ "CVE-2015-6815",
365
+ "CVE-2014-3691",
366
+ "CVE-2014-3708",
367
+ "CVE-2014-5008",
368
+ "CVE-2014-5009",
369
+ "CVE-2014-7230",
370
+ "CVE-2014-7231",
371
+ "CVE-2014-9493",
372
+ "CVE-2014-9623"
373
+ ],
374
+ "16.2": [
375
+ "CVE-2016-2124",
376
+ "CVE-2020-25717"
377
+ ],
378
+ "15": [
379
+ "CVE-2020-10685",
380
+ "CVE-2020-10753",
381
+ "CVE-2020-1759",
382
+ "CVE-2019-11287",
383
+ "CVE-2019-14859"
384
+ ],
385
+ "2.1": [
386
+ "CVE-2013-1793"
387
+ ],
388
+ "3.0": [
389
+ "CVE-2013-1793",
390
+ "CVE-2013-2029",
391
+ "CVE-2013-2113",
392
+ "CVE-2013-2121",
393
+ "CVE-2013-2166",
394
+ "CVE-2013-2167",
395
+ "CVE-2013-2255",
396
+ "CVE-2013-2882",
397
+ "CVE-2013-4180",
398
+ "CVE-2013-4182",
399
+ "CVE-2013-4185",
400
+ "CVE-2013-4214",
401
+ "CVE-2013-4222",
402
+ "CVE-2013-4261",
403
+ "CVE-2013-4386",
404
+ "CVE-2013-6393",
405
+ "CVE-2013-6460",
406
+ "CVE-2013-6461",
407
+ "CVE-2013-6491"
408
+ ],
409
+ "4.0": [
410
+ "CVE-2013-1793",
411
+ "CVE-2013-2255",
412
+ "CVE-2013-6391",
413
+ "CVE-2013-6393",
414
+ "CVE-2013-6460",
415
+ "CVE-2013-6461",
416
+ "CVE-2013-6470",
417
+ "CVE-2012-6685",
418
+ "CVE-2015-3456",
419
+ "CVE-2014-0040",
420
+ "CVE-2014-0041",
421
+ "CVE-2014-0042",
422
+ "CVE-2014-0071",
423
+ "CVE-2014-3621",
424
+ "CVE-2014-3691",
425
+ "CVE-2014-4615",
426
+ "CVE-2014-7821",
427
+ "CVE-2014-9493"
428
+ ],
429
+ "2.0": [
430
+ "CVE-2012-5474"
431
+ ],
432
+ "14": [
433
+ "CVE-2019-10141",
434
+ "CVE-2019-10156",
435
+ "CVE-2019-10192",
436
+ "CVE-2019-10193",
437
+ "CVE-2019-10876",
438
+ "CVE-2019-14859",
439
+ "CVE-2019-14900",
440
+ "CVE-2019-9514",
441
+ "CVE-2019-9515",
442
+ "CVE-2019-9735",
443
+ "CVE-2018-16856",
444
+ "CVE-2018-16876",
445
+ "CVE-2018-17963"
446
+ ]
447
+ }