Netflix / security_monkey / 1396 / 1
68%
develop: 68%

DEFAULT BRANCH: develop
Ran
Files 242
Run time 19s
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 68.733% (+2.3%) from 66.414%
UNIT_TEST_JOB=true PIP_DOWNLOAD_CACHE=".pip_download_cache" SECURITY_MONKEY_SETTINGS=`pwd`/env-config/config.py

push

travis-ci

web-flow 
Adding ResourcePolicyAuditor base class for *much* more intelligent cross account introspection  (#789) 👀

* Creating a new ResourcePolicyAuditor base class that sqs,sns,kms,elasticsearch,lambda,vpcendpoints,glacier,opsworks,s3 can use. Moving ARN and Policy parsing code into policyuniverse.

* Updating SNS.

* Naively updating s3,sns,kms,es to use new ResourcePolicyAuditor.

* Removing aws:username as a trusted field in condition block and bumping policyuniverse version.

* Updating ResourcePolicyAuditor to look for cross account account-wide access and other small fixes to get the ElasticSearch tests to work.

* Fixing RPA Tests.

* Alerting on ThirdParty and access granted to Root ARNs.

* Unitests for ResourcePolicyAuditor and subclasses need to clear the OBJECT_STORE in the pre_test_setup()

* Adding tests for the SNS Auditor.

* Upping coverage on the S3 Auditor.

* Ignoring service principals. Fixing Item.config hybrid name.

* Fixing the add method to ignore empty userids.

* Going back to using shorter issue text inline with existing issues.

* Removing SQS one-off where ResourcePolicyAuditor wouldn't look for a Policy block.

* Common Issue Category Text. Moving S3 ACL Issues into new category format. Saving actions with resource policy issues.

* Standardizing on Cross Account Root IAM and SNS Subscription wording.

* Fixing bug in sns auditor and fixing tests

* Fixing bug found running in prod.

9259 of 13471 relevant lines covered (68.73%)

0.69 hits per line

Source Files on job 1396.1 (UNIT_TEST_JOB=true PIP_DOWNLOAD_CACHE=".pip_download_cache" SECURITY_MONKEY_SETTINGS=`pwd`/env-config/config.py)