Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

auto changelog action and changelog.md and dependabot.yml file added #36

Merged
merged 3 commits into from
May 8, 2023

Conversation

mamrajyadav
Copy link
Contributor

what
• auto changelog action and changelog.md and dependabot.yml file added.
why
• need to auto changelog action to automatically update the CHANGELOG.YML file
• need to dependabot.yml file to weekly check and automatically create a pull request with the latest tag of modules used in the module.

@clouddrove-ci
Copy link
Member

Terraform Security Scan Failed

Show Output
Result #1 HIGH Root block device is not encrypted. 
────────────────────────────────────────────────────────────────────────────────
  main.tf:46-133
────────────────────────────────────────────────────────────────────────────────
   46resource "aws_instance" "default" {
   47count = var.instance_enabled == true ? var.instance_count : 0
   4849ami                                  = var.ami == "" ? data.aws_ami.ubuntu.id : var.ami
   50ebs_optimized                        = var.ebs_optimized
   51instance_type                        = var.instance_type
   52key_name                             = var.key_name
   53monitoring                           = var.monitoring
   54vpc_security_group_ids               = var.vpc_security_group_ids_list
   ..  
────────────────────────────────────────────────────────────────────────────────
          ID aws-ec2-enable-at-rest-encryption
      Impact The block device could be compromised and read from
  Resolution Turn on encryption for all block devices

  More Information
  - https://aquasecurity.github.io/tfsec/latest/checks/aws/ec2/enable-at-rest-encryption/
  - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance#ebs-ephemeral-and-root-block-devices
────────────────────────────────────────────────────────────────────────────────


  timings
  ──────────────────────────────────────────
  disk i/o             79.1µs
  parsing              63.6ms
  adaptation           122.699µs
  checks               10.6596ms
  total                74.461399ms

  counts
  ──────────────────────────────────────────
  modules downloaded   0
  modules processed    1
  blocks processed     77
  files read           3

  results
  ──────────────────────────────────────────
  passed               3
  ignored              1
  critical             0
  high                 1
  medium               0
  low                  0

  3 passed, 1 ignored, 1 potential problem(s) detected.

Copy link
Contributor

@yadavprakash yadavprakash left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@yadavprakash yadavprakash merged commit edcac30 into master May 8, 2023
@delete-merged-branch delete-merged-branch bot deleted the issue-385 branch May 8, 2023 15:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants