feat(query): add cbs disk without encrypted for tencentcloud

.github/scripts/queries-validator/metadata-schema.json

@@ -77,7 +77,8 @@
                 "azure",
                 "common",
                 "gcp",
-                "nifcloud"
+                "nifcloud",
+                "tencentcloud"
             ]
         },
         "platform": {

assets/queries/terraform/tencentcloud/disk_encryption_disabled/metadata.json

@@ -0,0 +1,13 @@
+{
+  "id": "1ee0f202-31da-49ba-bbce-04a989912e4b",
+  "queryName": "Disk Encryption Disabled",
+  "severity": "MEDIUM",
+  "category": "Encryption",
+  "descriptionText": "Disks should have encryption enabled",
+  "descriptionUrl": "https://registry.terraform.io/providers/tencentcloudstack/tencentcloud/latest/docs/resources/cbs_storage#encrypt",
+  "platform": "Terraform",
+  "descriptionID": "1ee0f202",
+  "cloudProvider": "tencentcloud",
+  "experimental": "true",
+  "cwe": ""
+}

assets/queries/terraform/tencentcloud/disk_encryption_disabled/query.rego

@@ -0,0 +1,39 @@
+package Cx
+
+import data.generic.common as common_lib
+import data.generic.terraform as tf_lib
+
+CxPolicy[result] {
+
+	resource := input.document[i].resource.tencentcloud_cbs_storage[name]
+    resource.encrypt == false
+
+	result := {
+		"documentId": input.document[i].id,
+		"resourceType": "tencentcloud_cbs_storage",
+		"resourceName": tf_lib.get_resource_name(resource, name),
+		"searchKey": sprintf("tencentcloud_cbs_storage[%s].encrypt", [name]),
+		"issueType": "IncorrectValue",
+		"keyExpectedValue": sprintf("[%s] has encryption set to true", [name]),
+		"keyActualValue": sprintf("[%s] has encryption set to false", [name]),
+        "searchLine":common_lib.build_search_line(["resource", "tencentcloud_cbs_storage", name, "encrypt"], []),
+	}
+}
+
+CxPolicy[result] {
+
+	resource := input.document[i].resource.tencentcloud_cbs_storage[name]
+    not common_lib.valid_key(resource, "encrypt")
+
+	result := {
+		"documentId": input.document[i].id,
+		"resourceType": "tencentcloud_cbs_storage",
+		"resourceName": tf_lib.get_resource_name(resource, name),
+		"searchKey": sprintf("tencentcloud_cbs_storage[%s]",[name]),
+		"issueType": "MissingAttribute",
+		"keyExpectedValue": sprintf("[%s] has encryption enabled",[name]),
+		"keyActualValue": sprintf("[%s] does not have encryption enabled",[name]),
+        "searchLine":common_lib.build_search_line(["resource", "tencentcloud_cbs_storage", name], []),
+	}
+}
+

assets/queries/terraform/tencentcloud/disk_encryption_disabled/test/negative1.tf

@@ -0,0 +1,11 @@
+resource "tencentcloud_cbs_storage" "encrytion_negative1" {
+  storage_name      = "cbs-test"
+  storage_type      = "CLOUD_SSD"
+  storage_size      = 100
+  availability_zone = "ap-guangzhou-3"
+  encrypt           = true
+
+  tags = {
+    test = "tf"
+  }
+}

assets/queries/terraform/tencentcloud/disk_encryption_disabled/test/positive1.tf

@@ -0,0 +1,10 @@
+resource "tencentcloud_cbs_storage" "encrytion_positive1" {
+  storage_name      = "cbs-test"
+  storage_type      = "CLOUD_SSD"
+  storage_size      = 100
+  availability_zone = "ap-guangzhou-3"
+
+  tags = {
+    test = "tf"
+  }
+}

assets/queries/terraform/tencentcloud/disk_encryption_disabled/test/positive2.tf

@@ -0,0 +1,11 @@
+resource "tencentcloud_cbs_storage" "encrytion_positive2" {
+  storage_name      = "cbs-test"
+  storage_type      = "CLOUD_SSD"
+  storage_size      = 100
+  availability_zone = "ap-guangzhou-3"
+  encrypt           = false
+
+  tags = {
+    test = "tf"
+  }
+}

assets/queries/terraform/tencentcloud/disk_encryption_disabled/test/positive_expected_result.json

@@ -0,0 +1,14 @@
+[
+  {
+    "queryName": "Disk Encryption Disabled",
+    "severity": "MEDIUM",
+    "line": 6,
+    "fileName": "positive2.tf"
+  },
+  {
+    "queryName": "Disk Encryption Disabled",
+    "severity": "MEDIUM",
+    "line": 1,
+    "fileName": "positive1.tf"
+  }
+]

test/main_test.go

@@ -41,6 +41,7 @@ var (
 		"../assets/queries/terraform/general":               {FileKind: []model.FileKind{model.KindTerraform, model.KindJSON}, Platform: "terraform"},
 		"../assets/queries/terraform/alicloud":              {FileKind: []model.FileKind{model.KindTerraform, model.KindJSON}, Platform: "terraform"},
 		"../assets/queries/terraform/nifcloud":              {FileKind: []model.FileKind{model.KindTerraform, model.KindJSON}, Platform: "terraform"},
+		"../assets/queries/terraform/tencentcloud":          {FileKind: []model.FileKind{model.KindTerraform, model.KindJSON}, Platform: "terraform"},
 		"../assets/queries/crossplane/aws":                  {FileKind: []model.FileKind{model.KindYAML}, Platform: "crossplane"},
 		"../assets/queries/crossplane/azure":                {FileKind: []model.FileKind{model.KindYAML}, Platform: "crossplane"},
 		"../assets/queries/crossplane/gcp":                  {FileKind: []model.FileKind{model.KindYAML}, Platform: "crossplane"},