elastic / cloudbeat / 28642678124

76%

Build Type

push

github

Committed by web-flow

Commit Message

fix: prevent panic when MS Graph returns AgentIdentityBlueprintPrincipal in service principal list (#7115)

### Summary of your changes

PageIterator[*models.ServicePrincipal] used an unsafe type assertion
(value.Index(i).Interface().(T)) that panics when the API returns
*AgentIdentityBlueprintPrincipal - a subtype automatically provisioned
by Microsoft 365 Copilot/Agents.
Changed the type parameter to the ServicePrincipalable interface, which
all subtypes satisfy.

### Screenshot/Data
<!--
If this PR adds a new feature, please add an example screenshot or data
(findings json for example).
-->


### Related Issues

- Related: https://github.com/elastic/seceng/issues/13877

### Checklist
- [ ] I have added tests that prove my fix is effective or that my
feature works
- [ ] I have added the necessary README/documentation (if appropriate)

#### Introducing a new rule?

- [ ] Generate rule metadata using [this
script](https://github.com/elastic/cloudbeat/tree/main/security-policies/dev#generate-rules-metadata)
- [ ] Add relevant unit tests
- [ ] Generate relevant rule templates using [this
script](https://github.com/elastic/cloudbeat/tree/main/security-policies/dev#generate-rule-templates),
and open a PR in
[elastic/packages/cloud_security_posture](https://github.com/elastic/integrations/tree/main/packages/cloud_security_posture)

Coverage Stats

0 of 4 new or added lines in 1 file covered. (0.0%)

2 existing lines in 1 file now uncovered.

9727 of 12836 relevant lines covered (75.78%)

16.43 hits per line