puppet-lint-infrasecure 1.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (64) hide show
  1. checksums.yaml +7 -0
  2. data/README.md +81 -0
  3. data/lib/puppet-lint/linter.rb +132 -0
  4. data/lib/puppet-lint/plugins/check_admin_by_default.rb +26 -0
  5. data/lib/puppet-lint/plugins/check_cyrillic_homograph_attack.rb +19 -0
  6. data/lib/puppet-lint/plugins/check_empty_password.rb +26 -0
  7. data/lib/puppet-lint/plugins/check_hard_coded_secret.rb +31 -0
  8. data/lib/puppet-lint/plugins/check_invalid_ip_addr_binding.rb +23 -0
  9. data/lib/puppet-lint/plugins/check_malicious_dependency.rb +24 -0
  10. data/lib/puppet-lint/plugins/check_suspicious_comment.rb +19 -0
  11. data/lib/puppet-lint/plugins/check_use_http_without_tls.rb +27 -0
  12. data/lib/puppet-lint/plugins/check_use_of_weak_crypto_algorithm.rb +21 -0
  13. data/lib/puppet-lint/plugins/check_weak_password.rb +27 -0
  14. data/lib/puppet-lint-infrasecure/config/dependencies.yml +33 -0
  15. data/lib/puppet-lint-infrasecure/config/whitelist +19 -0
  16. data/lib/puppet-lint-infrasecure/dependencies/activemq.json +407 -0
  17. data/lib/puppet-lint-infrasecure/dependencies/apt.json +453 -0
  18. data/lib/puppet-lint-infrasecure/dependencies/cassandra.json +122 -0
  19. data/lib/puppet-lint-infrasecure/dependencies/docker.json +200 -0
  20. data/lib/puppet-lint-infrasecure/dependencies/elasticsearch.json +32 -0
  21. data/lib/puppet-lint-infrasecure/dependencies/gitlab.json +1161 -0
  22. data/lib/puppet-lint-infrasecure/dependencies/grafana.json +31 -0
  23. data/lib/puppet-lint-infrasecure/dependencies/haproxy.json +159 -0
  24. data/lib/puppet-lint-infrasecure/dependencies/jenkins.json +876 -0
  25. data/lib/puppet-lint-infrasecure/dependencies/jira.json +460 -0
  26. data/lib/puppet-lint-infrasecure/dependencies/kafka.json +32 -0
  27. data/lib/puppet-lint-infrasecure/dependencies/kubernetes.json +123 -0
  28. data/lib/puppet-lint-infrasecure/dependencies/mongodb.json +156 -0
  29. data/lib/puppet-lint-infrasecure/dependencies/mysql.json +14549 -0
  30. data/lib/puppet-lint-infrasecure/dependencies/nagios_core.json +8 -0
  31. data/lib/puppet-lint-infrasecure/dependencies/nginx.json +1322 -0
  32. data/lib/puppet-lint-infrasecure/dependencies/nodejs.json +247 -0
  33. data/lib/puppet-lint-infrasecure/dependencies/ntp.json +2163 -0
  34. data/lib/puppet-lint-infrasecure/dependencies/openstack.json +447 -0
  35. data/lib/puppet-lint-infrasecure/dependencies/openvpn.json +816 -0
  36. data/lib/puppet-lint-infrasecure/dependencies/postgresql.json +4256 -0
  37. data/lib/puppet-lint-infrasecure/dependencies/puppet_agent.json +23 -0
  38. data/lib/puppet-lint-infrasecure/dependencies/python.json +1134 -0
  39. data/lib/puppet-lint-infrasecure/dependencies/rabbitmq.json +602 -0
  40. data/lib/puppet-lint-infrasecure/dependencies/redis.json +51 -0
  41. data/lib/puppet-lint-infrasecure/dependencies/ruby.json +487 -0
  42. data/lib/puppet-lint-infrasecure/dependencies/sqlite.json +52 -0
  43. data/lib/puppet-lint-infrasecure/dependencies/systemd.json +180 -0
  44. data/lib/puppet-lint-infrasecure/dependencies/tomcat.json +8635 -0
  45. data/lib/puppet-lint-infrasecure/dependencies/vault.json +14 -0
  46. data/lib/puppet-lint-infrasecure/dependencies/wget.json +129 -0
  47. data/lib/puppet-lint-infrasecure/dependencies/yum.json +14 -0
  48. data/lib/puppet-lint-infrasecure/dependencies/zabbix.json +940 -0
  49. data/lib/puppet-lint-infrasecure/regex.rb +18 -0
  50. data/lib/puppet-lint-infrasecure/rules.rb +51 -0
  51. data/lib/puppet-lint-infrasecure/version.rb +3 -0
  52. data/lib/puppet-lint-infrasecure.rb +62 -0
  53. data/spec/puppet-lint/plugins/check_admin_by_default_spec.rb +34 -0
  54. data/spec/puppet-lint/plugins/check_cyrillic_homograph_attack_spec.rb +22 -0
  55. data/spec/puppet-lint/plugins/check_empty_password_spec.rb +55 -0
  56. data/spec/puppet-lint/plugins/check_hard_coded_secret_spec.rb +53 -0
  57. data/spec/puppet-lint/plugins/check_invalid_ip_addr_binding_spec.rb +46 -0
  58. data/spec/puppet-lint/plugins/check_malicious_dependency_spec.rb +39 -0
  59. data/spec/puppet-lint/plugins/check_suspicious_comment_spec.rb +50 -0
  60. data/spec/puppet-lint/plugins/check_use_http_without_tls_spec.rb +100 -0
  61. data/spec/puppet-lint/plugins/check_use_of_weak_crypto_algorithm_spec.rb +42 -0
  62. data/spec/puppet-lint/plugins/check_weak_password_spec.rb +29 -0
  63. data/spec/spec_helper.rb +3 -0
  64. metadata +284 -0
data/lib/puppet-lint-infrasecure/dependencies/vault.json ADDED
@@ -0,0 +1,14 @@
1
+ {
2
+ "1.6.0": [
3
+ "CVE-2021-3282"
4
+ ],
5
+ "1.6.1": [
6
+ "CVE-2021-3282"
7
+ ],
8
+ "1.8.4": [
9
+ "CVE-2021-43998"
10
+ ],
11
+ "1.9.0": [
12
+ "CVE-2021-45042"
13
+ ]
14
+ }
data/lib/puppet-lint-infrasecure/dependencies/wget.json ADDED
@@ -0,0 +1,129 @@
1
+ {
2
+ "1.7": [
3
+ "CVE-2006-6719",
4
+ "CVE-2010-2252",
5
+ "CVE-2009-3490",
6
+ "CVE-2004-2014",
7
+ "CVE-2002-1344"
8
+ ],
9
+ "1.7.1": [
10
+ "CVE-2006-6719",
11
+ "CVE-2010-2252",
12
+ "CVE-2009-3490",
13
+ "CVE-2004-2014",
14
+ "CVE-2002-1344"
15
+ ],
16
+ "1.10.1": [
17
+ "CVE-2006-6719",
18
+ "CVE-2010-2252",
19
+ "CVE-2009-3490"
20
+ ],
21
+ "1.10.2": [
22
+ "CVE-2006-6719",
23
+ "CVE-2010-2252",
24
+ "CVE-2009-3490"
25
+ ],
26
+ "1.8.2": [
27
+ "CVE-2006-6719",
28
+ "CVE-2010-2252",
29
+ "CVE-2004-1487",
30
+ "CVE-2004-1488",
31
+ "CVE-2004-2014",
32
+ "CVE-2002-1344"
33
+ ],
34
+ "1.9": [
35
+ "CVE-2006-6719",
36
+ "CVE-2010-2252",
37
+ "CVE-2009-3490",
38
+ "CVE-2004-1487",
39
+ "CVE-2004-1488",
40
+ "CVE-2004-2014"
41
+ ],
42
+ "1.5.3": [
43
+ "CVE-2006-6719",
44
+ "CVE-2010-2252",
45
+ "CVE-2009-3490",
46
+ "CVE-2004-2014",
47
+ "CVE-1999-0402",
48
+ "CVE-2002-1344"
49
+ ],
50
+ "1.6": [
51
+ "CVE-2006-6719",
52
+ "CVE-2010-2252",
53
+ "CVE-2009-3490",
54
+ "CVE-2004-2014",
55
+ "CVE-2002-1344"
56
+ ],
57
+ "1.9.1": [
58
+ "CVE-2006-6719",
59
+ "CVE-2010-2252",
60
+ "CVE-2009-3490",
61
+ "CVE-2004-1487",
62
+ "CVE-2004-1488",
63
+ "CVE-2004-2014"
64
+ ],
65
+ "1.10": [
66
+ "CVE-2006-6719",
67
+ "CVE-2010-2252",
68
+ "CVE-2005-3185",
69
+ "CVE-2009-3490"
70
+ ],
71
+ "1.8": [
72
+ "CVE-2006-6719",
73
+ "CVE-2010-2252",
74
+ "CVE-2009-3490",
75
+ "CVE-2004-1487",
76
+ "CVE-2004-1488",
77
+ "CVE-2004-2014",
78
+ "CVE-2002-1344"
79
+ ],
80
+ "1.8.1": [
81
+ "CVE-2006-6719",
82
+ "CVE-2010-2252",
83
+ "CVE-2009-3490",
84
+ "CVE-2004-1487",
85
+ "CVE-2004-1488",
86
+ "CVE-2004-2014",
87
+ "CVE-2002-1344"
88
+ ],
89
+ "1.11.3": [
90
+ "CVE-2010-2252",
91
+ "CVE-2009-3490"
92
+ ],
93
+ "1.11.2": [
94
+ "CVE-2010-2252",
95
+ "CVE-2009-3490"
96
+ ],
97
+ "1.11.1": [
98
+ "CVE-2010-2252",
99
+ "CVE-2009-3490"
100
+ ],
101
+ "1.11": [
102
+ "CVE-2010-2252",
103
+ "CVE-2009-3490"
104
+ ],
105
+ "1.11.4": [
106
+ "CVE-2010-2252"
107
+ ],
108
+ "1.13": [
109
+ "CVE-2014-4877"
110
+ ],
111
+ "1.13.4": [
112
+ "CVE-2014-4877"
113
+ ],
114
+ "1.13.3": [
115
+ "CVE-2014-4877"
116
+ ],
117
+ "1.13.2": [
118
+ "CVE-2014-4877"
119
+ ],
120
+ "1.13.1": [
121
+ "CVE-2014-4877"
122
+ ],
123
+ "1.12": [
124
+ "CVE-2014-4877"
125
+ ],
126
+ "1.14": [
127
+ "CVE-2014-4877"
128
+ ]
129
+ }
data/lib/puppet-lint-infrasecure/dependencies/yum.json ADDED
@@ -0,0 +1,14 @@
1
+ {
2
+ "3.4.3": [
3
+ "CVE-2013-1910"
4
+ ],
5
+ "3.4.2": [
6
+ "CVE-2014-0022"
7
+ ],
8
+ "3.4.0": [
9
+ "CVE-2014-0022"
10
+ ],
11
+ "3.4.1": [
12
+ "CVE-2014-0022"
13
+ ]
14
+ }