puppet-lint-infrasecure 1.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (64) hide show
  1. checksums.yaml +7 -0
  2. data/README.md +81 -0
  3. data/lib/puppet-lint/linter.rb +132 -0
  4. data/lib/puppet-lint/plugins/check_admin_by_default.rb +26 -0
  5. data/lib/puppet-lint/plugins/check_cyrillic_homograph_attack.rb +19 -0
  6. data/lib/puppet-lint/plugins/check_empty_password.rb +26 -0
  7. data/lib/puppet-lint/plugins/check_hard_coded_secret.rb +31 -0
  8. data/lib/puppet-lint/plugins/check_invalid_ip_addr_binding.rb +23 -0
  9. data/lib/puppet-lint/plugins/check_malicious_dependency.rb +24 -0
  10. data/lib/puppet-lint/plugins/check_suspicious_comment.rb +19 -0
  11. data/lib/puppet-lint/plugins/check_use_http_without_tls.rb +27 -0
  12. data/lib/puppet-lint/plugins/check_use_of_weak_crypto_algorithm.rb +21 -0
  13. data/lib/puppet-lint/plugins/check_weak_password.rb +27 -0
  14. data/lib/puppet-lint-infrasecure/config/dependencies.yml +33 -0
  15. data/lib/puppet-lint-infrasecure/config/whitelist +19 -0
  16. data/lib/puppet-lint-infrasecure/dependencies/activemq.json +407 -0
  17. data/lib/puppet-lint-infrasecure/dependencies/apt.json +453 -0
  18. data/lib/puppet-lint-infrasecure/dependencies/cassandra.json +122 -0
  19. data/lib/puppet-lint-infrasecure/dependencies/docker.json +200 -0
  20. data/lib/puppet-lint-infrasecure/dependencies/elasticsearch.json +32 -0
  21. data/lib/puppet-lint-infrasecure/dependencies/gitlab.json +1161 -0
  22. data/lib/puppet-lint-infrasecure/dependencies/grafana.json +31 -0
  23. data/lib/puppet-lint-infrasecure/dependencies/haproxy.json +159 -0
  24. data/lib/puppet-lint-infrasecure/dependencies/jenkins.json +876 -0
  25. data/lib/puppet-lint-infrasecure/dependencies/jira.json +460 -0
  26. data/lib/puppet-lint-infrasecure/dependencies/kafka.json +32 -0
  27. data/lib/puppet-lint-infrasecure/dependencies/kubernetes.json +123 -0
  28. data/lib/puppet-lint-infrasecure/dependencies/mongodb.json +156 -0
  29. data/lib/puppet-lint-infrasecure/dependencies/mysql.json +14549 -0
  30. data/lib/puppet-lint-infrasecure/dependencies/nagios_core.json +8 -0
  31. data/lib/puppet-lint-infrasecure/dependencies/nginx.json +1322 -0
  32. data/lib/puppet-lint-infrasecure/dependencies/nodejs.json +247 -0
  33. data/lib/puppet-lint-infrasecure/dependencies/ntp.json +2163 -0
  34. data/lib/puppet-lint-infrasecure/dependencies/openstack.json +447 -0
  35. data/lib/puppet-lint-infrasecure/dependencies/openvpn.json +816 -0
  36. data/lib/puppet-lint-infrasecure/dependencies/postgresql.json +4256 -0
  37. data/lib/puppet-lint-infrasecure/dependencies/puppet_agent.json +23 -0
  38. data/lib/puppet-lint-infrasecure/dependencies/python.json +1134 -0
  39. data/lib/puppet-lint-infrasecure/dependencies/rabbitmq.json +602 -0
  40. data/lib/puppet-lint-infrasecure/dependencies/redis.json +51 -0
  41. data/lib/puppet-lint-infrasecure/dependencies/ruby.json +487 -0
  42. data/lib/puppet-lint-infrasecure/dependencies/sqlite.json +52 -0
  43. data/lib/puppet-lint-infrasecure/dependencies/systemd.json +180 -0
  44. data/lib/puppet-lint-infrasecure/dependencies/tomcat.json +8635 -0
  45. data/lib/puppet-lint-infrasecure/dependencies/vault.json +14 -0
  46. data/lib/puppet-lint-infrasecure/dependencies/wget.json +129 -0
  47. data/lib/puppet-lint-infrasecure/dependencies/yum.json +14 -0
  48. data/lib/puppet-lint-infrasecure/dependencies/zabbix.json +940 -0
  49. data/lib/puppet-lint-infrasecure/regex.rb +18 -0
  50. data/lib/puppet-lint-infrasecure/rules.rb +51 -0
  51. data/lib/puppet-lint-infrasecure/version.rb +3 -0
  52. data/lib/puppet-lint-infrasecure.rb +62 -0
  53. data/spec/puppet-lint/plugins/check_admin_by_default_spec.rb +34 -0
  54. data/spec/puppet-lint/plugins/check_cyrillic_homograph_attack_spec.rb +22 -0
  55. data/spec/puppet-lint/plugins/check_empty_password_spec.rb +55 -0
  56. data/spec/puppet-lint/plugins/check_hard_coded_secret_spec.rb +53 -0
  57. data/spec/puppet-lint/plugins/check_invalid_ip_addr_binding_spec.rb +46 -0
  58. data/spec/puppet-lint/plugins/check_malicious_dependency_spec.rb +39 -0
  59. data/spec/puppet-lint/plugins/check_suspicious_comment_spec.rb +50 -0
  60. data/spec/puppet-lint/plugins/check_use_http_without_tls_spec.rb +100 -0
  61. data/spec/puppet-lint/plugins/check_use_of_weak_crypto_algorithm_spec.rb +42 -0
  62. data/spec/puppet-lint/plugins/check_weak_password_spec.rb +29 -0
  63. data/spec/spec_helper.rb +3 -0
  64. metadata +284 -0
data/lib/puppet-lint-infrasecure/dependencies/activemq.json ADDED
@@ -0,0 +1,407 @@
1
+ {
2
+ "5.12.0": [
3
+ "CVE-2016-0734",
4
+ "CVE-2016-0782",
5
+ "CVE-2015-5254"
6
+ ],
7
+ "5.12.1": [
8
+ "CVE-2016-0734",
9
+ "CVE-2016-0782",
10
+ "CVE-2015-5254"
11
+ ],
12
+ "5.9.1": [
13
+ "CVE-2016-0734",
14
+ "CVE-2016-0782",
15
+ "CVE-2015-5254",
16
+ "CVE-2015-6524",
17
+ "CVE-2014-3600",
18
+ "CVE-2014-3612",
19
+ "CVE-2014-8110"
20
+ ],
21
+ "5.4.3": [
22
+ "CVE-2016-0734",
23
+ "CVE-2016-0782",
24
+ "CVE-2011-4905",
25
+ "CVE-2015-5254",
26
+ "CVE-2015-6524",
27
+ "CVE-2014-3600",
28
+ "CVE-2014-3612",
29
+ "CVE-2014-8110"
30
+ ],
31
+ "5.4.2": [
32
+ "CVE-2016-0734",
33
+ "CVE-2016-0782",
34
+ "CVE-2011-4905",
35
+ "CVE-2013-1879",
36
+ "CVE-2013-1880",
37
+ "CVE-2013-3060",
38
+ "CVE-2012-6092",
39
+ "CVE-2012-6551",
40
+ "CVE-2015-6524",
41
+ "CVE-2014-3600",
42
+ "CVE-2014-3612",
43
+ "CVE-2014-8110"
44
+ ],
45
+ "5.12.2": [
46
+ "CVE-2016-0734",
47
+ "CVE-2016-0782"
48
+ ],
49
+ "5.13.0": [
50
+ "CVE-2016-0734",
51
+ "CVE-2016-0782"
52
+ ],
53
+ "5.0.0": [
54
+ "CVE-2016-0734",
55
+ "CVE-2011-4905",
56
+ "CVE-2010-0684",
57
+ "CVE-2010-1244",
58
+ "CVE-2010-1587",
59
+ "CVE-2013-1879",
60
+ "CVE-2013-1880",
61
+ "CVE-2013-3060",
62
+ "CVE-2012-6092",
63
+ "CVE-2012-6551",
64
+ "CVE-2015-5254",
65
+ "CVE-2015-6524",
66
+ "CVE-2014-3600",
67
+ "CVE-2014-3612",
68
+ "CVE-2014-8110"
69
+ ],
70
+ "5.5.1": [
71
+ "CVE-2016-0734",
72
+ "CVE-2016-0782",
73
+ "CVE-2013-1879",
74
+ "CVE-2013-1880",
75
+ "CVE-2013-3060",
76
+ "CVE-2012-6092",
77
+ "CVE-2012-6551",
78
+ "CVE-2015-5254",
79
+ "CVE-2015-6524",
80
+ "CVE-2014-3600",
81
+ "CVE-2014-3612",
82
+ "CVE-2014-8110"
83
+ ],
84
+ "5.5.0": [
85
+ "CVE-2016-0734",
86
+ "CVE-2016-0782",
87
+ "CVE-2011-4905",
88
+ "CVE-2013-1879",
89
+ "CVE-2013-1880",
90
+ "CVE-2013-3060",
91
+ "CVE-2012-6092",
92
+ "CVE-2012-6551",
93
+ "CVE-2015-5254",
94
+ "CVE-2015-6524",
95
+ "CVE-2014-3600",
96
+ "CVE-2014-3612",
97
+ "CVE-2014-8110"
98
+ ],
99
+ "5.3.0": [
100
+ "CVE-2016-0734",
101
+ "CVE-2016-0782",
102
+ "CVE-2011-4905",
103
+ "CVE-2010-1587",
104
+ "CVE-2013-1879",
105
+ "CVE-2013-1880",
106
+ "CVE-2013-3060",
107
+ "CVE-2012-6092",
108
+ "CVE-2012-6551",
109
+ "CVE-2015-5254",
110
+ "CVE-2015-6524",
111
+ "CVE-2014-3600",
112
+ "CVE-2014-3612",
113
+ "CVE-2014-8110"
114
+ ],
115
+ "5.2.0": [
116
+ "CVE-2016-0734",
117
+ "CVE-2016-0782",
118
+ "CVE-2011-4905",
119
+ "CVE-2010-0684",
120
+ "CVE-2010-1244",
121
+ "CVE-2010-1587",
122
+ "CVE-2013-1879",
123
+ "CVE-2013-1880",
124
+ "CVE-2013-3060",
125
+ "CVE-2012-6092",
126
+ "CVE-2012-6551",
127
+ "CVE-2015-5254",
128
+ "CVE-2015-6524",
129
+ "CVE-2014-3600",
130
+ "CVE-2014-3612",
131
+ "CVE-2014-8110"
132
+ ],
133
+ "5.10.1": [
134
+ "CVE-2016-0734",
135
+ "CVE-2016-0782",
136
+ "CVE-2015-5254"
137
+ ],
138
+ "5.10.0": [
139
+ "CVE-2016-0734",
140
+ "CVE-2016-0782",
141
+ "CVE-2015-5254",
142
+ "CVE-2015-6524",
143
+ "CVE-2014-3600",
144
+ "CVE-2014-3612",
145
+ "CVE-2014-8110"
146
+ ],
147
+ "5.1.0": [
148
+ "CVE-2016-0734",
149
+ "CVE-2016-0782",
150
+ "CVE-2011-4905",
151
+ "CVE-2010-0684",
152
+ "CVE-2010-1244",
153
+ "CVE-2010-1587",
154
+ "CVE-2013-1879",
155
+ "CVE-2013-1880",
156
+ "CVE-2013-3060",
157
+ "CVE-2012-6092",
158
+ "CVE-2012-6551",
159
+ "CVE-2015-5254",
160
+ "CVE-2015-6524",
161
+ "CVE-2014-3600",
162
+ "CVE-2014-3612",
163
+ "CVE-2014-8110"
164
+ ],
165
+ "5.9.0": [
166
+ "CVE-2016-0734",
167
+ "CVE-2016-0782",
168
+ "CVE-2015-5254",
169
+ "CVE-2015-6524",
170
+ "CVE-2014-3600",
171
+ "CVE-2014-3612",
172
+ "CVE-2014-8110"
173
+ ],
174
+ "5.8.0": [
175
+ "CVE-2016-0734",
176
+ "CVE-2016-0782",
177
+ "CVE-2015-5254",
178
+ "CVE-2015-6524",
179
+ "CVE-2014-3600",
180
+ "CVE-2014-3612",
181
+ "CVE-2014-8110"
182
+ ],
183
+ "5.4.1": [
184
+ "CVE-2016-0734",
185
+ "CVE-2016-0782",
186
+ "CVE-2011-4905",
187
+ "CVE-2013-1879",
188
+ "CVE-2013-1880",
189
+ "CVE-2013-3060",
190
+ "CVE-2012-6092",
191
+ "CVE-2012-6551",
192
+ "CVE-2015-5254",
193
+ "CVE-2015-6524",
194
+ "CVE-2014-3600",
195
+ "CVE-2014-3612",
196
+ "CVE-2014-8110"
197
+ ],
198
+ "5.4.0": [
199
+ "CVE-2016-0734",
200
+ "CVE-2016-0782",
201
+ "CVE-2011-4905",
202
+ "CVE-2013-1879",
203
+ "CVE-2013-1880",
204
+ "CVE-2013-3060",
205
+ "CVE-2012-6092",
206
+ "CVE-2012-6551",
207
+ "CVE-2015-5254",
208
+ "CVE-2015-6524",
209
+ "CVE-2014-3600",
210
+ "CVE-2014-3612",
211
+ "CVE-2014-8110"
212
+ ],
213
+ "5.11.2": [
214
+ "CVE-2016-0734",
215
+ "CVE-2016-0782",
216
+ "CVE-2015-5254"
217
+ ],
218
+ "5.11.1": [
219
+ "CVE-2016-0734",
220
+ "CVE-2016-0782",
221
+ "CVE-2015-5254"
222
+ ],
223
+ "5.7.0": [
224
+ "CVE-2016-0734",
225
+ "CVE-2016-0782",
226
+ "CVE-2013-1879",
227
+ "CVE-2013-1880",
228
+ "CVE-2015-5254",
229
+ "CVE-2015-6524",
230
+ "CVE-2014-3600",
231
+ "CVE-2014-3612",
232
+ "CVE-2014-8110"
233
+ ],
234
+ "5.6.0": [
235
+ "CVE-2016-0734",
236
+ "CVE-2016-0782",
237
+ "CVE-2013-1879",
238
+ "CVE-2013-1880",
239
+ "CVE-2013-3060",
240
+ "CVE-2012-6092",
241
+ "CVE-2012-6551",
242
+ "CVE-2015-5254",
243
+ "CVE-2015-6524",
244
+ "CVE-2014-3600",
245
+ "CVE-2014-3612",
246
+ "CVE-2014-8110"
247
+ ],
248
+ "5.3.2": [
249
+ "CVE-2016-0734",
250
+ "CVE-2016-0782",
251
+ "CVE-2011-4905",
252
+ "CVE-2013-1879",
253
+ "CVE-2013-1880",
254
+ "CVE-2013-3060",
255
+ "CVE-2012-6092",
256
+ "CVE-2012-6551",
257
+ "CVE-2015-5254",
258
+ "CVE-2015-6524",
259
+ "CVE-2014-3600",
260
+ "CVE-2014-3612",
261
+ "CVE-2014-8110"
262
+ ],
263
+ "5.3.1": [
264
+ "CVE-2016-0734",
265
+ "CVE-2016-0782",
266
+ "CVE-2011-4905",
267
+ "CVE-2010-1587",
268
+ "CVE-2013-1879",
269
+ "CVE-2013-1880",
270
+ "CVE-2013-3060",
271
+ "CVE-2012-6092",
272
+ "CVE-2012-6551",
273
+ "CVE-2015-5254",
274
+ "CVE-2015-6524",
275
+ "CVE-2014-3600",
276
+ "CVE-2014-3612",
277
+ "CVE-2014-8110"
278
+ ],
279
+ "5.11.0": [
280
+ "CVE-2016-0734",
281
+ "CVE-2016-0782",
282
+ "CVE-2015-5254"
283
+ ],
284
+ "5.10.2": [
285
+ "CVE-2016-0734",
286
+ "CVE-2016-0782",
287
+ "CVE-2015-5254"
288
+ ],
289
+ "5.11.3": [
290
+ "CVE-2016-0782"
291
+ ],
292
+ "5.13.1": [
293
+ "CVE-2016-0782"
294
+ ],
295
+ "5.15.12": [
296
+ "CVE-2020-11998"
297
+ ],
298
+ "5.15.4": [
299
+ "CVE-2020-26217"
300
+ ],
301
+ "3.0": [
302
+ "CVE-2011-4905",
303
+ "CVE-2010-0684",
304
+ "CVE-2010-1244"
305
+ ],
306
+ "2.1": [
307
+ "CVE-2011-4905",
308
+ "CVE-2010-0684",
309
+ "CVE-2010-1244"
310
+ ],
311
+ "2.0": [
312
+ "CVE-2011-4905",
313
+ "CVE-2010-0684",
314
+ "CVE-2010-1244"
315
+ ],
316
+ "1.5": [
317
+ "CVE-2011-4905",
318
+ "CVE-2010-0684",
319
+ "CVE-2010-1244"
320
+ ],
321
+ "4.0.2": [
322
+ "CVE-2011-4905",
323
+ "CVE-2010-0684",
324
+ "CVE-2010-1244",
325
+ "CVE-2013-3060",
326
+ "CVE-2012-6092",
327
+ "CVE-2012-6551"
328
+ ],
329
+ "4.0.1": [
330
+ "CVE-2011-4905",
331
+ "CVE-2010-0684",
332
+ "CVE-2010-1244",
333
+ "CVE-2013-3060",
334
+ "CVE-2012-6092",
335
+ "CVE-2012-6551"
336
+ ],
337
+ "4.0": [
338
+ "CVE-2011-4905",
339
+ "CVE-2010-0684",
340
+ "CVE-2010-1244",
341
+ "CVE-2013-3060",
342
+ "CVE-2012-6092",
343
+ "CVE-2012-6551"
344
+ ],
345
+ "4.1.2": [
346
+ "CVE-2011-4905"
347
+ ],
348
+ "4.1.0": [
349
+ "CVE-2011-4905",
350
+ "CVE-2010-0684",
351
+ "CVE-2010-1244",
352
+ "CVE-2013-3060",
353
+ "CVE-2012-6092",
354
+ "CVE-2012-6551"
355
+ ],
356
+ "3.2.1": [
357
+ "CVE-2011-4905",
358
+ "CVE-2010-0684",
359
+ "CVE-2010-1244"
360
+ ],
361
+ "3.1": [
362
+ "CVE-2011-4905",
363
+ "CVE-2010-0684",
364
+ "CVE-2010-1244"
365
+ ],
366
+ "1.4": [
367
+ "CVE-2011-4905",
368
+ "CVE-2010-0684",
369
+ "CVE-2010-1244"
370
+ ],
371
+ "1.2": [
372
+ "CVE-2011-4905",
373
+ "CVE-2010-0684",
374
+ "CVE-2010-1244"
375
+ ],
376
+ "4.1.1": [
377
+ "CVE-2011-4905",
378
+ "CVE-2010-0684",
379
+ "CVE-2010-1244",
380
+ "CVE-2013-3060",
381
+ "CVE-2012-6092",
382
+ "CVE-2012-6551"
383
+ ],
384
+ "3.2.2": [
385
+ "CVE-2011-4905",
386
+ "CVE-2010-0684",
387
+ "CVE-2010-1244"
388
+ ],
389
+ "3.2": [
390
+ "CVE-2011-4905",
391
+ "CVE-2010-0684",
392
+ "CVE-2010-1244"
393
+ ],
394
+ "1.3": [
395
+ "CVE-2011-4905",
396
+ "CVE-2010-0684",
397
+ "CVE-2010-1244"
398
+ ],
399
+ "1.1": [
400
+ "CVE-2011-4905",
401
+ "CVE-2010-0684",
402
+ "CVE-2010-1244"
403
+ ],
404
+ "5.4-snapshot": [
405
+ "CVE-2010-1587"
406
+ ]
407
+ }