security-policies/bundle/compliance/policy/process/ensure_appropriate_arguments.rego (17 lines of code) (raw):
package compliance.policy.process.ensure_appropriate_arguments
import data.benchmark_data_adapter
import data.compliance.lib.common as lib_common
import data.compliance.policy.process.data_adapter
import future.keywords.if
process_args := benchmark_data_adapter.process_args
finding(entities) := lib_common.generate_result_without_expected(
lib_common.calculate_result(rule_evaluation(entities)),
{"process_args": process_args},
)
# TODO: Change index access to cycle
rule_evaluation(entities) if {
process_args[entities[0]]
process_args[entities[1]]
} else := false
apiserver_filter := data_adapter.is_kube_apiserver
etcd_filter := data_adapter.is_etcd