turbot/github_compliance

Query: repo_webhook_package_registery_security_settings_enabled

Usage

powerpipe query github_compliance.query.repo_webhook_package_registery_security_settings_enabled

SQL

with hooks_info as (
select
login as name,
url,
h as hook
from
github_my_organization,
jsonb_array_elements(hooks) h
union
select
name,
url,
h as hook
from
github_my_repository,
jsonb_array_elements(hooks) h
)
select
-- Required Columns
url as resource,
case
when (
hook ->> 'active' = 'true'
and (
hook -> 'config' ->> 'insecure_ssl' = '1'
or hook -> 'config' ->> 'secret' is null
or hook -> 'config' ->> 'url' not like '%https:%'
)
) then 'alarm'
else 'ok'
end as status,
case
when (
hook ->> 'active' = 'true'
and (
hook -> 'config' ->> 'insecure_ssl' = '1'
or hook -> 'config' ->> 'secret' is null
or hook -> 'config' ->> 'url' not like '%https:%'
)
) then (hook ->> 'id') || ' is an insecure hook.'
else (hook ->> 'id') || ' is a secure hook.'
end as reason,
-- Additional Dimensions
name
from
hooks_info;

Controls

The query is being used by the following controls: