Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update deps + pull in new MQL updates #489

Merged
merged 2 commits into from
Dec 3, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions docs/mql/resources/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,7 @@ These specialized packs let you deep-dive into attributes unique to the platform
- [Arista resource pack](./arista-pack)
- [Atlassian resource pack](./atlassian-pack)
- [Azure resource pack](./azure-pack)
- [Cloudflare resource pack](./cloudflare-pack)
- [Equinix Metal resource pack](./equinix-pack)
- [GitHub resource pack](./github-pack)
- [GitLab resource pack](./gitlab-pack)
Expand Down
23 changes: 13 additions & 10 deletions docs/mql/resources/aws-pack/aws.ecr.image.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,16 +20,19 @@ Use the `aws.ecr.image` resource to assess a container image stored in an Amazon

**Fields**

| ID | TYPE | DESCRIPTION |
| ---------- | ---------------- | ------------------------------------------------------------- |
| digest | string | SHA256 of the image manifest |
| mediaType | string | Type of image manifest |
| tags | []string | List of tags associated with image |
| registryId | string | AWS account ID associated with public registry for this image |
| repoName | string | Name of the repository for the image |
| region | string | Region where the ECR image is located |
| arn | string | ARN for the image |
| uri | string | uri for the image repository |
| ID | TYPE | DESCRIPTION |
| -------------------- | ---------------- | ----------------------------------------------------------------------------------------- |
| digest | string | SHA256 of the image manifest |
| mediaType | string | Type of image manifest |
| tags | []string | List of tags associated with image |
| registryId | string | AWS account ID associated with public registry for this image |
| repoName | string | Name of the repository for the image |
| region | string | Region where the ECR image is located |
| arn | string | ARN for the image |
| uri | string | uri for the image repository |
| pushedAt | time | Time the image was pushed |
| sizeInBytes | int | Size of the image in bytes |
| lastRecordedPullTime | time | Time of the most recent image pull (Amazon only refreshes this data once every 24 hours.) |

**Examples**

Expand Down
35 changes: 35 additions & 0 deletions docs/mql/resources/cloudflare-pack/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,35 @@
---
title: Cloudflare Resource Pack - MQL Resources
id: cloudflare.pack

Check warning on line 3 in docs/mql/resources/cloudflare-pack/README.md

View workflow job for this annotation

GitHub Actions / Run spell check

`cloudflare` is not a recognized word. (unrecognized-spelling)
sidebar_label: Cloudflare Resource Pack
displayed_sidebar: MQL
description: The Cloudflare resource pack lets you use MQL to query and assess the security of your Cloudflare configuration.
---

# Mondoo Cloudflare Resource Pack Reference

The Cloudflare resource pack lets you use MQL to query and assess the security of your Cloudflare configuration.

Resources included in this pack:

| ID | DESCRIPTION |
| --------------------------------------------------------------- | -------------------------------- |
| [cloudflare](cloudflare.md) | Cloudflare provider |

Check warning on line 17 in docs/mql/resources/cloudflare-pack/README.md

View workflow job for this annotation

GitHub Actions / Run spell check

`cloudflare` is not a recognized word. (unrecognized-spelling)

Check warning on line 17 in docs/mql/resources/cloudflare-pack/README.md

View workflow job for this annotation

GitHub Actions / Run spell check

`cloudflare` is not a recognized word. (unrecognized-spelling)
| [cloudflare.account](cloudflare.account.md) | Cloudflare account |

Check warning on line 18 in docs/mql/resources/cloudflare-pack/README.md

View workflow job for this annotation

GitHub Actions / Run spell check

`cloudflare` is not a recognized word. (unrecognized-spelling)

Check warning on line 18 in docs/mql/resources/cloudflare-pack/README.md

View workflow job for this annotation

GitHub Actions / Run spell check

`cloudflare` is not a recognized word. (unrecognized-spelling)
| [cloudflare.account.settings](cloudflare.account.settings.md) | Account settings |
| [cloudflare.corsHeaders](cloudflare.corsheaders.md) | |
| [cloudflare.dns](cloudflare.dns.md) | |
| [cloudflare.dns.record](cloudflare.dns.record.md) | DNS record |
| [cloudflare.one](cloudflare.one.md) | |
| [cloudflare.one.app](cloudflare.one.app.md) | Cloudflare One application |
| [cloudflare.one.idp](cloudflare.one.idp.md) | |
| [cloudflare.r2](cloudflare.r2.md) | Cloudflare R2 |
| [cloudflare.r2.bucket](cloudflare.r2.bucket.md) | Cloudflare R2 bucket |
| [cloudflare.streams](cloudflare.streams.md) | |
| [cloudflare.streams.liveInput](cloudflare.streams.liveinput.md) | Cloudflare live input (stream) |
| [cloudflare.streams.video](cloudflare.streams.video.md) | Cloudflare videos and recordings |
| [cloudflare.workers](cloudflare.workers.md) | Cloudflare workers |
| [cloudflare.workers.page](cloudflare.workers.page.md) | |
| [cloudflare.workers.worker](cloudflare.workers.worker.md) | Cloudflare worker |
| [cloudflare.zone](cloudflare.zone.md) | Cloudflare DNS zone |
| [cloudflare.zone.account](cloudflare.zone.account.md) | |
24 changes: 24 additions & 0 deletions docs/mql/resources/cloudflare-pack/cloudflare.account.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
---
title: cloudflare.account
id: cloudflare.account
sidebar_label: cloudflare.account
displayed_sidebar: MQL
description: Cloudflare account
---

# cloudflare.account

**Description**

Cloudflare account

**Fields**

| ID | TYPE | DESCRIPTION |
| ---------- | ------------------------------------------------------------------------- | ----------------------------- |
| id | string | Cloudflare account identifier |
| name | string | Account name |
| settings | [cloudflare.account.settings](cloudflare.account.settings.md) | Settings |
| createdOn | time | Time the account was created |
| liveInputs | [][cloudflare.streams.liveInput](cloudflare.streams.liveinput.md) | Live inputs |
| videos | [][cloudflare.streams.video](cloudflare.streams.video.md) | Videos |
19 changes: 19 additions & 0 deletions docs/mql/resources/cloudflare-pack/cloudflare.account.settings.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
---
title: cloudflare.account.settings
id: cloudflare.account.settings
sidebar_label: cloudflare.account.settings
displayed_sidebar: MQL
description: Account settings
---

# cloudflare.account.settings

**Description**

Account settings

**Fields**

| ID | TYPE | DESCRIPTION |
| ---------------- | ---- | ------------------------------------------------------------------------------------- |
| enforceTwoFactor | bool | Whether membership in this account requires that two-factor authentication is enabled |
21 changes: 21 additions & 0 deletions docs/mql/resources/cloudflare-pack/cloudflare.corsheaders.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
---
title: cloudflare.corsHeaders
id: cloudflare.corsHeaders
sidebar_label: cloudflare.corsHeaders
displayed_sidebar: MQL
---

# cloudflare.corsHeaders

**Fields**

| ID | TYPE | DESCRIPTION |
| ---------------- | ---------------- | ----------- |
| allowAllHeaders | bool | |
| allowAllMethods | bool | |
| allowAllOrigins | bool | |
| allowCredentials | bool | |
| allowedHeaders | []string | |
| allowedMethods | []string | |
| allowedOrigins | []string | |
| maxAge | int | |
14 changes: 14 additions & 0 deletions docs/mql/resources/cloudflare-pack/cloudflare.dns.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
---
title: cloudflare.dns
id: cloudflare.dns
sidebar_label: cloudflare.dns
displayed_sidebar: MQL
---

# cloudflare.dns

**Fields**

| ID | TYPE | DESCRIPTION |
| ------- | ----------------------------------------------------------- | ----------- |
| records | [][cloudflare.dns.record](cloudflare.dns.record.md) | |
29 changes: 29 additions & 0 deletions docs/mql/resources/cloudflare-pack/cloudflare.dns.record.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
---
title: cloudflare.dns.record
id: cloudflare.dns.record
sidebar_label: cloudflare.dns.record
displayed_sidebar: MQL
description: DNS record
---

# cloudflare.dns.record

**Description**

DNS record

**Fields**

| ID | TYPE | DESCRIPTION |
| ---------- | ---------------- | -------------------------------------------------------- |
| id | string | Cloudflare internal ID |
| name | string | Record name |
| comment | string | Comment |
| tags | []string | Tags |
| proxied | bool | Whether the record is proxied (false indicated DNS only) |
| proxiable | bool | Whether the record can be proxied |
| type | string | Type of record (A, AAAA, CNAME, etc.) |
| content | string | Content of the record (hostname, IP Address, etc.) |
| ttl | int | Time to live (in seconds) |
| createdOn | time | Time the record was created |
| modifiedOn | time | Time the record was last modified |
20 changes: 20 additions & 0 deletions docs/mql/resources/cloudflare-pack/cloudflare.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
title: cloudflare
id: cloudflare
sidebar_label: cloudflare
displayed_sidebar: MQL
description: Cloudflare provider
---

# cloudflare

**Description**

Cloudflare provider

**Fields**

| ID | TYPE | DESCRIPTION |
| -------- | ----------------------------------------------------- | ----------------------- |
| zones | [][cloudflare.zone](cloudflare.zone.md) | List all zones |
| accounts | [][cloudflare.account](cloudflare.account.md) | List available accounts |
39 changes: 39 additions & 0 deletions docs/mql/resources/cloudflare-pack/cloudflare.one.app.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,39 @@
---
title: cloudflare.one.app
id: cloudflare.one.app
sidebar_label: cloudflare.one.app
displayed_sidebar: MQL
description: Cloudflare One application
---

# cloudflare.one.app

**Description**

Cloudflare One application

**Fields**

| ID | TYPE | DESCRIPTION |
| ------------------------ | --------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- |
| id | string | |
| aud | string | UUID |
| name | string | Audience tag |
| domain | string | Name of the application |
| allowedIdentityProviders | []string | Domain of the application |
| appLauncherVisible | bool | Allowed identity providers |
| autoRedirectToIdentity | bool | Whether the application displays in the App Launcher |
| corsHeaders | [cloudflare.corsHeaders](cloudflare.corsheaders.md) | Whether users skip the identity provider selection step during login |
| optionsPreflightBypass | bool | CORS headers |
| customDenyMessage | string | Whether preflight requests are allowed to bypass Access authentication and go directly to the origin (can't be true if corsHeaders is set) |
| customDenyUrl | string | Custom error message shown to a user when they are denied access to the application |
| serviceAuth401Redirect | bool | Custom URL to redirect a user to when they are denied access to the application |
| enableBindingCookie | bool | Whether to return a 401 status code when the request is blocked by a Service Auth policy |
| httpOnlyCookieAttribute | bool | Whether to allow the binding cookie, which increases security against compromised authorization tokens and CSRF attacks |
| sameSiteCookieAttribute | string | Whether the HttpOnly cookie attribute, which increases security against XSS attacks, is enabled |
| logoUrl | string | SameSite cookie setting, which provides increased security against CSRF attacks |
| sessionDuration | string | URL of the application's logo |
| skipInterstitial | bool | Amount of time that tokens issued for this application will be valid (Format is 300ms or 2h45m. Valid time units are: ns, us (or µs), ms, s, m, and h.) |
| type | string | Whether automatic authentication through cloudflared is enabled |
| createdAt | time | Application type, Time the application was created |
| updatedAt | time | Time the application was last updated |
16 changes: 16 additions & 0 deletions docs/mql/resources/cloudflare-pack/cloudflare.one.idp.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
---
title: cloudflare.one.idp
id: cloudflare.one.idp
sidebar_label: cloudflare.one.idp
displayed_sidebar: MQL
---

# cloudflare.one.idp

**Fields**

| ID | TYPE | DESCRIPTION |
| ---- | ------ | -------------------------------------------------------------------- |
| id | string | |
| name | string | UUID |
| type | string | The name of the identity provider, shown to users on the login page. |
15 changes: 15 additions & 0 deletions docs/mql/resources/cloudflare-pack/cloudflare.one.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
---
title: cloudflare.one
id: cloudflare.one
sidebar_label: cloudflare.one
displayed_sidebar: MQL
---

# cloudflare.one

**Fields**

| ID | TYPE | DESCRIPTION |
| ----------------- | ----------------------------------------------------- | ---------------------------------- |
| apps | [][cloudflare.one.app](cloudflare.one.app.md) | |
| identityProviders | [][cloudflare.one.idp](cloudflare.one.idp.md) | Cloudflare Zero Trust applications |
21 changes: 21 additions & 0 deletions docs/mql/resources/cloudflare-pack/cloudflare.r2.bucket.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
---
title: cloudflare.r2.bucket
id: cloudflare.r2.bucket
sidebar_label: cloudflare.r2.bucket
displayed_sidebar: MQL
description: Cloudflare R2 bucket
---

# cloudflare.r2.bucket

**Description**

Cloudflare R2 bucket

**Fields**

| ID | TYPE | DESCRIPTION |
| --------- | ------ | --------------------------- |
| name | string | Bucket name |
| location | string | Bucket location |
| createdOn | time | Time the bucket was created |
19 changes: 19 additions & 0 deletions docs/mql/resources/cloudflare-pack/cloudflare.r2.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
---
title: cloudflare.r2
id: cloudflare.r2
sidebar_label: cloudflare.r2
displayed_sidebar: MQL
description: Cloudflare R2
---

# cloudflare.r2

**Description**

Cloudflare R2

**Fields**

| ID | TYPE | DESCRIPTION |
| ------- | --------------------------------------------------------- | ----------- |
| buckets | [][cloudflare.r2.bucket](cloudflare.r2.bucket.md) | |
22 changes: 22 additions & 0 deletions docs/mql/resources/cloudflare-pack/cloudflare.streams.liveinput.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
---
title: cloudflare.streams.liveInput
id: cloudflare.streams.liveInput
sidebar_label: cloudflare.streams.liveInput
displayed_sidebar: MQL
description: Cloudflare live input (stream)
---

# cloudflare.streams.liveInput

**Description**

Cloudflare live input (stream)

**Fields**

| ID | TYPE | DESCRIPTION |
| ------------------------ | ------ | -------------------------------------------------- |
| id | string | cnquery resource ID |
| uid | string | Unique identifier |
| name | string | Input name |
| deleteRecordingAfterDays | int | Number of days after which to delete the recording |
8 changes: 8 additions & 0 deletions docs/mql/resources/cloudflare-pack/cloudflare.streams.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
---
title: cloudflare.streams
id: cloudflare.streams
sidebar_label: cloudflare.streams
displayed_sidebar: MQL
---

# cloudflare.streams
Loading
Loading