Update iam.tf #9147

ep-93 · 2025-01-31T13:16:37Z

CircleCI policy additions

github-actions · 2025-01-31T13:18:49Z

`Trivy Scan` Success

Show Output

```hcl

Trivy will check the following folders:
terraform/environments/youth-justice-app-framework

Running Trivy in terraform/environments/youth-justice-app-framework
2025-01-31T13:18:38Z INFO [vulndb] Need to update DB
2025-01-31T13:18:38Z INFO [vulndb] Downloading vulnerability DB...
2025-01-31T13:18:38Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-01-31T13:18:40Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-01-31T13:18:40Z INFO [vuln] Vulnerability scanning is enabled
2025-01-31T13:18:40Z INFO [misconfig] Misconfiguration scanning is enabled
2025-01-31T13:18:40Z INFO [misconfig] Need to update the built-in checks
2025-01-31T13:18:40Z INFO [misconfig] Downloading the built-in checks...
162.46 KiB / 162.46 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2025-01-31T13:18:41Z INFO [secret] Secret scanning is enabled
2025-01-31T13:18:41Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2025-01-31T13:18:41Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2025-01-31T13:18:42Z INFO [terraform scanner] Scanning root module file_path="."
2025-01-31T13:18:42Z WARN [terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly. module="root" variables="networking"
2025-01-31T13:18:42Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.ram-ec2-retagging[0].data.aws_subnet.host" value="cty.NilVal"
2025-01-31T13:18:42Z INFO Number of language-specific files num=0
2025-01-31T13:18:42Z INFO Detected config files num=2
trivy_exitcode=0

</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:
terraform/environments/youth-justice-app-framework

*****************************

Running Checkov in terraform/environments/youth-justice-app-framework
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
terraform scan results:

Passed checks: 19, Failed checks: 0, Skipped checks: 5


checkov_exitcode=0

`CTFLint Scan` Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.9.1)
tflint will check the following folders:
terraform/environments/youth-justice-app-framework

*****************************

Running tflint in terraform/environments/youth-justice-app-framework
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

`Trivy Scan` Success

Show Output

*****************************

Trivy will check the following folders:
terraform/environments/youth-justice-app-framework

*****************************

Running Trivy in terraform/environments/youth-justice-app-framework
2025-01-31T13:18:38Z	INFO	[vulndb] Need to update DB
2025-01-31T13:18:38Z	INFO	[vulndb] Downloading vulnerability DB...
2025-01-31T13:18:38Z	INFO	[vulndb] Downloading artifact...	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-01-31T13:18:40Z	INFO	[vulndb] Artifact successfully downloaded	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-01-31T13:18:40Z	INFO	[vuln] Vulnerability scanning is enabled
2025-01-31T13:18:40Z	INFO	[misconfig] Misconfiguration scanning is enabled
2025-01-31T13:18:40Z	INFO	[misconfig] Need to update the built-in checks
2025-01-31T13:18:40Z	INFO	[misconfig] Downloading the built-in checks...
162.46 KiB / 162.46 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2025-01-31T13:18:41Z	INFO	[secret] Secret scanning is enabled
2025-01-31T13:18:41Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2025-01-31T13:18:41Z	INFO	[secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2025-01-31T13:18:42Z	INFO	[terraform scanner] Scanning root module	file_path="."
2025-01-31T13:18:42Z	WARN	[terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly.	module="root" variables="networking"
2025-01-31T13:18:42Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.ram-ec2-retagging[0].data.aws_subnet.host" value="cty.NilVal"
2025-01-31T13:18:42Z	INFO	Number of language-specific files	num=0
2025-01-31T13:18:42Z	INFO	Detected config files	num=2
trivy_exitcode=0

richgreen-moj

LGTM

github-actions · 2025-02-10T09:53:40Z

`Trivy Scan` Success

Show Output

```hcl

Trivy will check the following folders:
terraform/environments/youth-justice-app-framework

Running Trivy in terraform/environments/youth-justice-app-framework
2025-02-10T09:53:32Z INFO [vulndb] Need to update DB
2025-02-10T09:53:32Z INFO [vulndb] Downloading vulnerability DB...
2025-02-10T09:53:32Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-02-10T09:53:35Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-02-10T09:53:35Z INFO [vuln] Vulnerability scanning is enabled
2025-02-10T09:53:35Z INFO [misconfig] Misconfiguration scanning is enabled
2025-02-10T09:53:35Z INFO [misconfig] Need to update the built-in checks
2025-02-10T09:53:35Z INFO [misconfig] Downloading the built-in checks...
162.46 KiB / 162.46 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2025-02-10T09:53:35Z INFO [secret] Secret scanning is enabled
2025-02-10T09:53:35Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2025-02-10T09:53:35Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2025-02-10T09:53:36Z INFO [terraform scanner] Scanning root module file_path="."
2025-02-10T09:53:36Z WARN [terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly. module="root" variables="networking"
2025-02-10T09:53:36Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.ram-ec2-retagging[0].data.aws_subnet.host" value="cty.NilVal"
2025-02-10T09:53:36Z INFO Number of language-specific files num=0
2025-02-10T09:53:36Z INFO Detected config files num=2
trivy_exitcode=0

</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:
terraform/environments/youth-justice-app-framework

*****************************

Running Checkov in terraform/environments/youth-justice-app-framework
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
terraform scan results:

Passed checks: 19, Failed checks: 0, Skipped checks: 5


checkov_exitcode=0

`CTFLint Scan` Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.9.1)
tflint will check the following folders:
terraform/environments/youth-justice-app-framework

*****************************

Running tflint in terraform/environments/youth-justice-app-framework
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

`Trivy Scan` Success

Show Output

*****************************

Trivy will check the following folders:
terraform/environments/youth-justice-app-framework

*****************************

Running Trivy in terraform/environments/youth-justice-app-framework
2025-02-10T09:53:32Z	INFO	[vulndb] Need to update DB
2025-02-10T09:53:32Z	INFO	[vulndb] Downloading vulnerability DB...
2025-02-10T09:53:32Z	INFO	[vulndb] Downloading artifact...	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-02-10T09:53:35Z	INFO	[vulndb] Artifact successfully downloaded	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-02-10T09:53:35Z	INFO	[vuln] Vulnerability scanning is enabled
2025-02-10T09:53:35Z	INFO	[misconfig] Misconfiguration scanning is enabled
2025-02-10T09:53:35Z	INFO	[misconfig] Need to update the built-in checks
2025-02-10T09:53:35Z	INFO	[misconfig] Downloading the built-in checks...
162.46 KiB / 162.46 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2025-02-10T09:53:35Z	INFO	[secret] Secret scanning is enabled
2025-02-10T09:53:35Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2025-02-10T09:53:35Z	INFO	[secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2025-02-10T09:53:36Z	INFO	[terraform scanner] Scanning root module	file_path="."
2025-02-10T09:53:36Z	WARN	[terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly.	module="root" variables="networking"
2025-02-10T09:53:36Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.ram-ec2-retagging[0].data.aws_subnet.host" value="cty.NilVal"
2025-02-10T09:53:36Z	INFO	Number of language-specific files	num=0
2025-02-10T09:53:36Z	INFO	Detected config files	num=2
trivy_exitcode=0

github-actions · 2025-03-05T08:53:05Z

`Trivy Scan` Success

Show Output

```hcl

Trivy will check the following folders:
terraform/environments/youth-justice-app-framework

Running Trivy in terraform/environments/youth-justice-app-framework
2025-03-05T08:52:57Z INFO [vulndb] Need to update DB
2025-03-05T08:52:57Z INFO [vulndb] Downloading vulnerability DB...
2025-03-05T08:52:57Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-03-05T08:52:59Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-03-05T08:52:59Z INFO [vuln] Vulnerability scanning is enabled
2025-03-05T08:52:59Z INFO [misconfig] Misconfiguration scanning is enabled
2025-03-05T08:52:59Z INFO [misconfig] Need to update the built-in checks
2025-03-05T08:52:59Z INFO [misconfig] Downloading the built-in checks...
163.77 KiB / 163.77 KiB [------------------------------------------------------] 100.00% ? p/s 100ms2025-03-05T08:52:59Z INFO [secret] Secret scanning is enabled
2025-03-05T08:52:59Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2025-03-05T08:52:59Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2025-03-05T08:53:01Z INFO [terraform scanner] Scanning root module file_path="."
2025-03-05T08:53:01Z WARN [terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly. module="root" variables="networking"
2025-03-05T08:53:01Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.ram-ec2-retagging[0].data.aws_subnet.host" value="cty.NilVal"
2025-03-05T08:53:01Z INFO Number of language-specific files num=0
2025-03-05T08:53:01Z INFO Detected config files num=2
trivy_exitcode=0

</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:
terraform/environments/youth-justice-app-framework

*****************************

Running Checkov in terraform/environments/youth-justice-app-framework
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
terraform scan results:

Passed checks: 19, Failed checks: 0, Skipped checks: 5


checkov_exitcode=0

`CTFLint Scan` Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.9.1)
tflint will check the following folders:
terraform/environments/youth-justice-app-framework

*****************************

Running tflint in terraform/environments/youth-justice-app-framework
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

`Trivy Scan` Success

Show Output

*****************************

Trivy will check the following folders:
terraform/environments/youth-justice-app-framework

*****************************

Running Trivy in terraform/environments/youth-justice-app-framework
2025-03-05T08:52:57Z	INFO	[vulndb] Need to update DB
2025-03-05T08:52:57Z	INFO	[vulndb] Downloading vulnerability DB...
2025-03-05T08:52:57Z	INFO	[vulndb] Downloading artifact...	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-03-05T08:52:59Z	INFO	[vulndb] Artifact successfully downloaded	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-03-05T08:52:59Z	INFO	[vuln] Vulnerability scanning is enabled
2025-03-05T08:52:59Z	INFO	[misconfig] Misconfiguration scanning is enabled
2025-03-05T08:52:59Z	INFO	[misconfig] Need to update the built-in checks
2025-03-05T08:52:59Z	INFO	[misconfig] Downloading the built-in checks...
163.77 KiB / 163.77 KiB [------------------------------------------------------] 100.00% ? p/s 100ms2025-03-05T08:52:59Z	INFO	[secret] Secret scanning is enabled
2025-03-05T08:52:59Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2025-03-05T08:52:59Z	INFO	[secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2025-03-05T08:53:01Z	INFO	[terraform scanner] Scanning root module	file_path="."
2025-03-05T08:53:01Z	WARN	[terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly.	module="root" variables="networking"
2025-03-05T08:53:01Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.ram-ec2-retagging[0].data.aws_subnet.host" value="cty.NilVal"
2025-03-05T08:53:01Z	INFO	Number of language-specific files	num=0
2025-03-05T08:53:01Z	INFO	Detected config files	num=2
trivy_exitcode=0

github-actions · 2025-03-06T08:38:22Z

`Trivy Scan` Success

Show Output

```hcl

Trivy will check the following folders:
terraform/environments/youth-justice-app-framework

Running Trivy in terraform/environments/youth-justice-app-framework
2025-03-06T08:38:14Z INFO [vulndb] Need to update DB
2025-03-06T08:38:14Z INFO [vulndb] Downloading vulnerability DB...
2025-03-06T08:38:14Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-03-06T08:38:16Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-03-06T08:38:16Z INFO [vuln] Vulnerability scanning is enabled
2025-03-06T08:38:16Z INFO [misconfig] Misconfiguration scanning is enabled
2025-03-06T08:38:16Z INFO [misconfig] Need to update the built-in checks
2025-03-06T08:38:16Z INFO [misconfig] Downloading the built-in checks...
163.77 KiB / 163.77 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2025-03-06T08:38:16Z INFO [secret] Secret scanning is enabled
2025-03-06T08:38:16Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2025-03-06T08:38:16Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2025-03-06T08:38:17Z INFO [terraform scanner] Scanning root module file_path="."
2025-03-06T08:38:17Z WARN [terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly. module="root" variables="networking"
2025-03-06T08:38:17Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.ram-ec2-retagging[0].data.aws_subnet.host" value="cty.NilVal"
2025-03-06T08:38:17Z INFO Number of language-specific files num=0
2025-03-06T08:38:17Z INFO Detected config files num=2
trivy_exitcode=0

</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:
terraform/environments/youth-justice-app-framework

*****************************

Running Checkov in terraform/environments/youth-justice-app-framework
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
terraform scan results:

Passed checks: 19, Failed checks: 0, Skipped checks: 5


checkov_exitcode=0

`CTFLint Scan` Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.9.1)
tflint will check the following folders:
terraform/environments/youth-justice-app-framework

*****************************

Running tflint in terraform/environments/youth-justice-app-framework
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

`Trivy Scan` Success

Show Output

*****************************

Trivy will check the following folders:
terraform/environments/youth-justice-app-framework

*****************************

Running Trivy in terraform/environments/youth-justice-app-framework
2025-03-06T08:38:14Z	INFO	[vulndb] Need to update DB
2025-03-06T08:38:14Z	INFO	[vulndb] Downloading vulnerability DB...
2025-03-06T08:38:14Z	INFO	[vulndb] Downloading artifact...	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-03-06T08:38:16Z	INFO	[vulndb] Artifact successfully downloaded	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-03-06T08:38:16Z	INFO	[vuln] Vulnerability scanning is enabled
2025-03-06T08:38:16Z	INFO	[misconfig] Misconfiguration scanning is enabled
2025-03-06T08:38:16Z	INFO	[misconfig] Need to update the built-in checks
2025-03-06T08:38:16Z	INFO	[misconfig] Downloading the built-in checks...
163.77 KiB / 163.77 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2025-03-06T08:38:16Z	INFO	[secret] Secret scanning is enabled
2025-03-06T08:38:16Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2025-03-06T08:38:16Z	INFO	[secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2025-03-06T08:38:17Z	INFO	[terraform scanner] Scanning root module	file_path="."
2025-03-06T08:38:17Z	WARN	[terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly.	module="root" variables="networking"
2025-03-06T08:38:17Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.ram-ec2-retagging[0].data.aws_subnet.host" value="cty.NilVal"
2025-03-06T08:38:17Z	INFO	Number of language-specific files	num=0
2025-03-06T08:38:17Z	INFO	Detected config files	num=2
trivy_exitcode=0

github-actions · 2025-03-06T08:55:32Z

`Trivy Scan` Success

Show Output

```hcl

Trivy will check the following folders:
terraform/environments/youth-justice-app-framework

Running Trivy in terraform/environments/youth-justice-app-framework
2025-03-06T08:55:21Z INFO [vulndb] Need to update DB
2025-03-06T08:55:21Z INFO [vulndb] Downloading vulnerability DB...
2025-03-06T08:55:21Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-03-06T08:55:23Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-03-06T08:55:23Z INFO [vuln] Vulnerability scanning is enabled
2025-03-06T08:55:23Z INFO [misconfig] Misconfiguration scanning is enabled
2025-03-06T08:55:23Z INFO [misconfig] Need to update the built-in checks
2025-03-06T08:55:23Z INFO [misconfig] Downloading the built-in checks...
163.77 KiB / 163.77 KiB [------------------------------------------------------] 100.00% ? p/s 100ms2025-03-06T08:55:24Z INFO [secret] Secret scanning is enabled
2025-03-06T08:55:24Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2025-03-06T08:55:24Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2025-03-06T08:55:25Z INFO [terraform scanner] Scanning root module file_path="."
2025-03-06T08:55:25Z WARN [terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly. module="root" variables="networking"
2025-03-06T08:55:25Z ERROR [terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable. block="module.ram-ec2-retagging[0].data.aws_subnet.host" value="cty.NilVal"
2025-03-06T08:55:25Z INFO Number of language-specific files num=0
2025-03-06T08:55:25Z INFO Detected config files num=2
trivy_exitcode=0

</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>

```hcl

*****************************

Checkov will check the following folders:
terraform/environments/youth-justice-app-framework

*****************************

Running Checkov in terraform/environments/youth-justice-app-framework
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
terraform scan results:

Passed checks: 19, Failed checks: 0, Skipped checks: 5


checkov_exitcode=0

`CTFLint Scan` Success

Show Output

*****************************

Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.9.1)
tflint will check the following folders:
terraform/environments/youth-justice-app-framework

*****************************

Running tflint in terraform/environments/youth-justice-app-framework
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0

`Trivy Scan` Success

Show Output

*****************************

Trivy will check the following folders:
terraform/environments/youth-justice-app-framework

*****************************

Running Trivy in terraform/environments/youth-justice-app-framework
2025-03-06T08:55:21Z	INFO	[vulndb] Need to update DB
2025-03-06T08:55:21Z	INFO	[vulndb] Downloading vulnerability DB...
2025-03-06T08:55:21Z	INFO	[vulndb] Downloading artifact...	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-03-06T08:55:23Z	INFO	[vulndb] Artifact successfully downloaded	repo="public.ecr.aws/aquasecurity/trivy-db:2"
2025-03-06T08:55:23Z	INFO	[vuln] Vulnerability scanning is enabled
2025-03-06T08:55:23Z	INFO	[misconfig] Misconfiguration scanning is enabled
2025-03-06T08:55:23Z	INFO	[misconfig] Need to update the built-in checks
2025-03-06T08:55:23Z	INFO	[misconfig] Downloading the built-in checks...
163.77 KiB / 163.77 KiB [------------------------------------------------------] 100.00% ? p/s 100ms2025-03-06T08:55:24Z	INFO	[secret] Secret scanning is enabled
2025-03-06T08:55:24Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2025-03-06T08:55:24Z	INFO	[secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2025-03-06T08:55:25Z	INFO	[terraform scanner] Scanning root module	file_path="."
2025-03-06T08:55:25Z	WARN	[terraform parser] Variable values was not found in the environment or variable files. Evaluating may not work correctly.	module="root" variables="networking"
2025-03-06T08:55:25Z	ERROR	[terraform evaluator] Failed to expand block. Invalid "for-each" argument. Must be known and iterable.	block="module.ram-ec2-retagging[0].data.aws_subnet.host" value="cty.NilVal"
2025-03-06T08:55:25Z	INFO	Number of language-specific files	num=0
2025-03-06T08:55:25Z	INFO	Detected config files	num=2
trivy_exitcode=0

Update iam.tf

cca5a34

ep-93 requested a review from a team as a code owner January 31, 2025 13:16

ep-93 temporarily deployed to development January 31, 2025 13:17 — with GitHub Actions Inactive

ep-93 had a problem deploying to test January 31, 2025 13:17 — with GitHub Actions Failure

ep-93 temporarily deployed to test January 31, 2025 14:50 — with GitHub Actions Inactive

richgreen-moj approved these changes Jan 31, 2025

View reviewed changes

Merge branch 'main' into feature/adding-circleci-permissions

884ad79

ep-93 temporarily deployed to development February 10, 2025 09:52 — with GitHub Actions Inactive

ep-93 temporarily deployed to test February 10, 2025 09:52 — with GitHub Actions Inactive

Merge branch 'main' into feature/adding-circleci-permissions

e8cac98

dms1981 requested a deployment to development March 5, 2025 08:51 — with GitHub Actions Waiting

dms1981 requested a deployment to test March 5, 2025 08:51 — with GitHub Actions Waiting

ep-93 closed this Mar 6, 2025

ep-93 reopened this Mar 6, 2025

ep-93 deployed to development March 6, 2025 08:37 — with GitHub Actions Active

ep-93 deployed to test March 6, 2025 08:37 — with GitHub Actions Active

Merge branch 'main' into feature/adding-circleci-permissions

5985607

ep-93 requested a deployment to development March 6, 2025 08:54 — with GitHub Actions Waiting

ep-93 requested a deployment to test March 6, 2025 08:54 — with GitHub Actions Waiting

dms1981 approved these changes Mar 6, 2025

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update iam.tf #9147

Update iam.tf #9147

ep-93 commented Jan 31, 2025 •

edited

Loading

github-actions bot commented Jan 31, 2025

richgreen-moj left a comment

github-actions bot commented Feb 10, 2025

github-actions bot commented Mar 5, 2025

github-actions bot commented Mar 6, 2025

github-actions bot commented Mar 6, 2025

Update iam.tf #9147

Are you sure you want to change the base?

Update iam.tf #9147

Conversation

ep-93 commented Jan 31, 2025 • edited Loading

github-actions bot commented Jan 31, 2025

Trivy Scan Success

CTFLint Scan Success

Trivy Scan Success

richgreen-moj left a comment

Choose a reason for hiding this comment

github-actions bot commented Feb 10, 2025

Trivy Scan Success

CTFLint Scan Success

Trivy Scan Success

github-actions bot commented Mar 5, 2025

Trivy Scan Success

CTFLint Scan Success

Trivy Scan Success

github-actions bot commented Mar 6, 2025

Trivy Scan Success

CTFLint Scan Success

Trivy Scan Success

github-actions bot commented Mar 6, 2025

Trivy Scan Success

CTFLint Scan Success

Trivy Scan Success

ep-93 commented Jan 31, 2025 •

edited

Loading

`Trivy Scan` Success

`CTFLint Scan` Success

`Trivy Scan` Success

`Trivy Scan` Success

`CTFLint Scan` Success

`Trivy Scan` Success

`Trivy Scan` Success

`CTFLint Scan` Success

`Trivy Scan` Success

`Trivy Scan` Success

`CTFLint Scan` Success

`Trivy Scan` Success

`Trivy Scan` Success

`CTFLint Scan` Success

`Trivy Scan` Success