diff --git a/docs/policies/gcp.md b/docs/policies/gcp.md index 293e92d5a..14fc85df3 100644 --- a/docs/policies/gcp.md +++ b/docs/policies/gcp.md @@ -6,13 +6,6 @@ | Compliance Validation | gcp | HIGH | Ensure Container-Optimized OS (cos) is used for Kubernetes Engine Clusters Node image. | accurics.gcp.OPS.114 | AC_GCP_0016 | | Security Best Practices | gcp | LOW | Ensure 'Automatic node repair' is enabled for Kubernetes Clusters. | accurics.gcp.OPS.144 | AC_GCP_0015 | - -### github_repository -| Category | Resource | Severity | Description | Reference ID | ID | -| -------- | -------- | -------- | ----------- | ------------ | -- | -| Identity and Access Management | gcp | MEDIUM | Repository is Not Private. | accurics.gcp.IAM.145 | AC_GCP_0231 | - - ### google_bigquery_dataset | Category | Resource | Severity | Description | Reference ID | ID | | -------- | -------- | -------- | ----------- | ------------ | -- | diff --git a/pkg/policies/opa/rego/gcp/github_repository/accurics.gcp.IAM.145.json b/pkg/policies/opa/rego/gcp/github_repository/accurics.gcp.IAM.145.json deleted file mode 100755 index 41bd3ad88..000000000 --- a/pkg/policies/opa/rego/gcp/github_repository/accurics.gcp.IAM.145.json +++ /dev/null @@ -1,13 +0,0 @@ -{ - "name": "privateRepoEnabled", - "file": "privateRepoEnabled.rego", - "policy_type": "gcp", - "resource_type": "github_repository", - "template_args": null, - "severity": "MEDIUM", - "description": "Repository is Not Private or Internal.", - "reference_id": "accurics.gcp.IAM.145", - "category": "Identity and Access Management", - "version": 1, - "id": "AC_GCP_0231" -} \ No newline at end of file diff --git a/pkg/policies/opa/rego/gcp/github_repository/privateRepoEnabled.rego b/pkg/policies/opa/rego/gcp/github_repository/privateRepoEnabled.rego deleted file mode 100755 index e66b98b78..000000000 --- a/pkg/policies/opa/rego/gcp/github_repository/privateRepoEnabled.rego +++ /dev/null @@ -1,8 +0,0 @@ -package accurics - -privateRepoEnabled[api.id] { - api := input.github_repository[_] - not api.config.private == true - not api.config.visibility == "private" - not api.config.visibility == "internal" -}