Add security checks to tfsec that detect overly permissive firewall configurations for DigitalOcean resources.
Add security checks to tfsec that detect overly permissive firewall configurations for DigitalOcean resources.: a task in LegoFlow-SWE (Harbor dataset). Currently there are no rules that flag firewall rules with wide-open CIDR ranges in digitalocean firewall resources. This can lead to unintended…
The task
Currently there are no rules that flag firewall rules with wide-open CIDR ranges in `digitalocean_firewall` resources. This can lead to unintended exposure of ports to the entire internet.
Part of Lego-X/LegoFlow-SWE.