puppet-lint-infrasecure 1.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (64) hide show
  1. checksums.yaml +7 -0
  2. data/README.md +81 -0
  3. data/lib/puppet-lint/linter.rb +132 -0
  4. data/lib/puppet-lint/plugins/check_admin_by_default.rb +26 -0
  5. data/lib/puppet-lint/plugins/check_cyrillic_homograph_attack.rb +19 -0
  6. data/lib/puppet-lint/plugins/check_empty_password.rb +26 -0
  7. data/lib/puppet-lint/plugins/check_hard_coded_secret.rb +31 -0
  8. data/lib/puppet-lint/plugins/check_invalid_ip_addr_binding.rb +23 -0
  9. data/lib/puppet-lint/plugins/check_malicious_dependency.rb +24 -0
  10. data/lib/puppet-lint/plugins/check_suspicious_comment.rb +19 -0
  11. data/lib/puppet-lint/plugins/check_use_http_without_tls.rb +27 -0
  12. data/lib/puppet-lint/plugins/check_use_of_weak_crypto_algorithm.rb +21 -0
  13. data/lib/puppet-lint/plugins/check_weak_password.rb +27 -0
  14. data/lib/puppet-lint-infrasecure/config/dependencies.yml +33 -0
  15. data/lib/puppet-lint-infrasecure/config/whitelist +19 -0
  16. data/lib/puppet-lint-infrasecure/dependencies/activemq.json +407 -0
  17. data/lib/puppet-lint-infrasecure/dependencies/apt.json +453 -0
  18. data/lib/puppet-lint-infrasecure/dependencies/cassandra.json +122 -0
  19. data/lib/puppet-lint-infrasecure/dependencies/docker.json +200 -0
  20. data/lib/puppet-lint-infrasecure/dependencies/elasticsearch.json +32 -0
  21. data/lib/puppet-lint-infrasecure/dependencies/gitlab.json +1161 -0
  22. data/lib/puppet-lint-infrasecure/dependencies/grafana.json +31 -0
  23. data/lib/puppet-lint-infrasecure/dependencies/haproxy.json +159 -0
  24. data/lib/puppet-lint-infrasecure/dependencies/jenkins.json +876 -0
  25. data/lib/puppet-lint-infrasecure/dependencies/jira.json +460 -0
  26. data/lib/puppet-lint-infrasecure/dependencies/kafka.json +32 -0
  27. data/lib/puppet-lint-infrasecure/dependencies/kubernetes.json +123 -0
  28. data/lib/puppet-lint-infrasecure/dependencies/mongodb.json +156 -0
  29. data/lib/puppet-lint-infrasecure/dependencies/mysql.json +14549 -0
  30. data/lib/puppet-lint-infrasecure/dependencies/nagios_core.json +8 -0
  31. data/lib/puppet-lint-infrasecure/dependencies/nginx.json +1322 -0
  32. data/lib/puppet-lint-infrasecure/dependencies/nodejs.json +247 -0
  33. data/lib/puppet-lint-infrasecure/dependencies/ntp.json +2163 -0
  34. data/lib/puppet-lint-infrasecure/dependencies/openstack.json +447 -0
  35. data/lib/puppet-lint-infrasecure/dependencies/openvpn.json +816 -0
  36. data/lib/puppet-lint-infrasecure/dependencies/postgresql.json +4256 -0
  37. data/lib/puppet-lint-infrasecure/dependencies/puppet_agent.json +23 -0
  38. data/lib/puppet-lint-infrasecure/dependencies/python.json +1134 -0
  39. data/lib/puppet-lint-infrasecure/dependencies/rabbitmq.json +602 -0
  40. data/lib/puppet-lint-infrasecure/dependencies/redis.json +51 -0
  41. data/lib/puppet-lint-infrasecure/dependencies/ruby.json +487 -0
  42. data/lib/puppet-lint-infrasecure/dependencies/sqlite.json +52 -0
  43. data/lib/puppet-lint-infrasecure/dependencies/systemd.json +180 -0
  44. data/lib/puppet-lint-infrasecure/dependencies/tomcat.json +8635 -0
  45. data/lib/puppet-lint-infrasecure/dependencies/vault.json +14 -0
  46. data/lib/puppet-lint-infrasecure/dependencies/wget.json +129 -0
  47. data/lib/puppet-lint-infrasecure/dependencies/yum.json +14 -0
  48. data/lib/puppet-lint-infrasecure/dependencies/zabbix.json +940 -0
  49. data/lib/puppet-lint-infrasecure/regex.rb +18 -0
  50. data/lib/puppet-lint-infrasecure/rules.rb +51 -0
  51. data/lib/puppet-lint-infrasecure/version.rb +3 -0
  52. data/lib/puppet-lint-infrasecure.rb +62 -0
  53. data/spec/puppet-lint/plugins/check_admin_by_default_spec.rb +34 -0
  54. data/spec/puppet-lint/plugins/check_cyrillic_homograph_attack_spec.rb +22 -0
  55. data/spec/puppet-lint/plugins/check_empty_password_spec.rb +55 -0
  56. data/spec/puppet-lint/plugins/check_hard_coded_secret_spec.rb +53 -0
  57. data/spec/puppet-lint/plugins/check_invalid_ip_addr_binding_spec.rb +46 -0
  58. data/spec/puppet-lint/plugins/check_malicious_dependency_spec.rb +39 -0
  59. data/spec/puppet-lint/plugins/check_suspicious_comment_spec.rb +50 -0
  60. data/spec/puppet-lint/plugins/check_use_http_without_tls_spec.rb +100 -0
  61. data/spec/puppet-lint/plugins/check_use_of_weak_crypto_algorithm_spec.rb +42 -0
  62. data/spec/puppet-lint/plugins/check_weak_password_spec.rb +29 -0
  63. data/spec/spec_helper.rb +3 -0
  64. metadata +284 -0
data/lib/puppet-lint-infrasecure/dependencies/mongodb.json ADDED
@@ -0,0 +1,156 @@
1
+ {
2
+ "1.7.0": [
3
+ "CVE-2017-14227"
4
+ ],
5
+ "2.6.0": [
6
+ "CVE-2016-3104",
7
+ "CVE-2015-1609",
8
+ "CVE-2014-3971"
9
+ ],
10
+ "2.4.0": [
11
+ "CVE-2016-3104",
12
+ "CVE-2013-2132",
13
+ "CVE-2013-3969",
14
+ "CVE-2013-4650"
15
+ ],
16
+ "4.4.0": [
17
+ "CVE-2020-7925"
18
+ ],
19
+ "2.2.0": [
20
+ "CVE-2013-1892",
21
+ "CVE-2013-2132",
22
+ "CVE-2012-6619"
23
+ ],
24
+ "2.2.1": [
25
+ "CVE-2013-1892",
26
+ "CVE-2012-6619"
27
+ ],
28
+ "2.0.7": [
29
+ "CVE-2013-1892",
30
+ "CVE-2012-6619"
31
+ ],
32
+ "1.4.0": [
33
+ "CVE-2013-1892",
34
+ "CVE-2013-2132",
35
+ "CVE-2012-6619"
36
+ ],
37
+ "1.2.0": [
38
+ "CVE-2013-1892",
39
+ "CVE-2013-2132",
40
+ "CVE-2012-6619"
41
+ ],
42
+ "2.0.2": [
43
+ "CVE-2013-1892",
44
+ "CVE-2012-6619"
45
+ ],
46
+ "2.0.1": [
47
+ "CVE-2013-1892",
48
+ "CVE-2012-6619"
49
+ ],
50
+ "2.2.2": [
51
+ "CVE-2013-1892",
52
+ "CVE-2012-6619"
53
+ ],
54
+ "2.2.3": [
55
+ "CVE-2013-1892",
56
+ "CVE-2012-6619"
57
+ ],
58
+ "2.0.0": [
59
+ "CVE-2013-1892",
60
+ "CVE-2013-2132",
61
+ "CVE-2012-6619"
62
+ ],
63
+ "2.0.6": [
64
+ "CVE-2013-1892",
65
+ "CVE-2012-6619"
66
+ ],
67
+ "2.0.5": [
68
+ "CVE-2013-1892",
69
+ "CVE-2012-6619"
70
+ ],
71
+ "1.8.0": [
72
+ "CVE-2013-1892",
73
+ "CVE-2013-2132",
74
+ "CVE-2012-6619"
75
+ ],
76
+ "1.6.0": [
77
+ "CVE-2013-1892",
78
+ "CVE-2013-2132",
79
+ "CVE-2012-6619"
80
+ ],
81
+ "2.0.4": [
82
+ "CVE-2013-1892",
83
+ "CVE-2012-6619"
84
+ ],
85
+ "2.0.3": [
86
+ "CVE-2013-1892",
87
+ "CVE-2012-6619"
88
+ ],
89
+ "2.4.3": [
90
+ "CVE-2013-2132",
91
+ "CVE-2013-3969",
92
+ "CVE-2013-4650"
93
+ ],
94
+ "2.4.2": [
95
+ "CVE-2013-2132",
96
+ "CVE-2013-3969",
97
+ "CVE-2013-4650"
98
+ ],
99
+ "2.4.1": [
100
+ "CVE-2013-2132",
101
+ "CVE-2013-3969",
102
+ "CVE-2013-4650"
103
+ ],
104
+ "2.4.5": [
105
+ "CVE-2013-2132"
106
+ ],
107
+ "2.5.0": [
108
+ "CVE-2013-2132",
109
+ "CVE-2013-4650"
110
+ ],
111
+ "2.4.4": [
112
+ "CVE-2013-2132",
113
+ "CVE-2013-3969",
114
+ "CVE-2013-4650"
115
+ ],
116
+ "2.2.4": [
117
+ "CVE-2012-6619"
118
+ ],
119
+ "2.2.5": [
120
+ "CVE-2012-6619"
121
+ ],
122
+ "2.0.8": [
123
+ "CVE-2012-6619"
124
+ ],
125
+ "2.2.6": [
126
+ "CVE-2012-6619"
127
+ ],
128
+ "2.2.7": [
129
+ "CVE-2012-6619"
130
+ ],
131
+ "2.3.0": [
132
+ "CVE-2012-6619"
133
+ ],
134
+ "2.6.2": [
135
+ "CVE-2015-1609"
136
+ ],
137
+ "2.6.3": [
138
+ "CVE-2015-1609"
139
+ ],
140
+ "2.6.4": [
141
+ "CVE-2015-1609"
142
+ ],
143
+ "2.6.5": [
144
+ "CVE-2015-1609"
145
+ ],
146
+ "2.6.6": [
147
+ "CVE-2015-1609"
148
+ ],
149
+ "2.6.7": [
150
+ "CVE-2015-1609"
151
+ ],
152
+ "2.6.1": [
153
+ "CVE-2015-1609",
154
+ "CVE-2014-3971"
155
+ ]
156
+ }