Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cnquery scan mock not able to resolve services #4330

Open
mm-weber opened this issue Jul 10, 2024 · 3 comments
Open

cnquery scan mock not able to resolve services #4330

mm-weber opened this issue Jul 10, 2024 · 3 comments
Labels
bug Something isn't working

Comments

@mm-weber
Copy link
Contributor

When running

cnspec scan mock --discover all --use-recording ./fail-rec.json -o full -f ./redhat-test-7.mql.yaml

all check that use the

! Error: Ensure dhcp server services are not in use
Message: 1 error occurred:
* rpc error: code = Unknown desc = could not retrieve service list

! Error: Ensure ip6tables is enabled and active
Message: 1 error occurred:
* rpc error: code = Unknown desc = could not retrieve service list

@mm-weber mm-weber added the bug Something isn't working label Jul 10, 2024
@mm-weber
Copy link
Contributor Author

Also, all checks using some sort of package("sudo").installed-type checks will all return fail, even if the recording.

image

image

@mm-weber
Copy link
Contributor Author

Also, this cnspec scan k8s --use-recording certifications/aks-1.5.0/pass-k8s.json -f policies/azure-aks.mql.yaml yields:

image

@mm-weber
Copy link
Contributor Author

In short:

  • Make the --use-recording switch work reliably across all providers
  • Show the exact syntax needed for each provider.
  • Also make sure the --use-recording switch does not try to connect to the online asset, but only connects to the recording.json file offline.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant