fix(passwords and secrets): excluded TF file function reference in re…

…sults #4433
Checkmarx · Nov 2, 2021 · 2f3c7c9 · 2f3c7c9
1 parent 072bc68
commit 2f3c7c9
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/assets/queries/common/passwords_and_secrets/regex_rules.json b/assets/queries/common/passwords_and_secrets/regex_rules.json
@@ -276,6 +276,10 @@
     {
       "description": "Avoiding arn",
       "regex": "(?i)['\"]?[a-zA-Z_]+['\"]?\\s*[=:]\\s*['\"]?(arn:)['\"]?"
+    },
+    {
+      "description": "Avoiding TF file function",
+      "regex": "(?i)['\"]?[a-zA-Z_]+['\"]?\\s*=\\s*['\"]?(file\\()['\"]?"
     }
   ]
 }
diff --git a/assets/queries/common/passwords_and_secrets/test/negative46.tf b/assets/queries/common/passwords_and_secrets/test/negative46.tf
@@ -0,0 +1,9 @@
+resource "aws_instance" "instance" {
+  ami           = data.aws_ami.ubuntu.id
+  instance_type = "t3.micro"
+
+  connection {
+    user        = "ubuntu"
+    private_key = file(var.private_key_path)
+  }
+}