2023-03-15 16:00:52 +00:00
|
|
|
# Copyright (c) HashiCorp, Inc.
|
|
|
|
|
# SPDX-License-Identifier: MPL-2.0
|
|
|
|
|
|
2022-03-18 18:14:03 +00:00
|
|
|
rules:
|
|
|
|
|
- id: physical-storage-bypass-encryption
|
|
|
|
|
patterns:
|
|
|
|
|
- pattern-either:
|
|
|
|
|
- pattern: $CORE.physical.Put(...)
|
|
|
|
|
- pattern: $CORE.underlyingPhysical.Put(...)
|
|
|
|
|
message: "Bypassing encryption by accessing physical storage directly"
|
|
|
|
|
languages: [go]
|
|
|
|
|
severity: WARNING
|
