diff --git a/PROJECTS/intermediate/docker-security-audit/internal/analyzer/compose.go b/PROJECTS/intermediate/docker-security-audit/internal/analyzer/compose.go index 49dd44ba..04b96b1e 100644 --- a/PROJECTS/intermediate/docker-security-audit/internal/analyzer/compose.go +++ b/PROJECTS/intermediate/docker-security-audit/internal/analyzer/compose.go @@ -448,7 +448,10 @@ func (a *ComposeAnalyzer) checkEnvironment( if rules.IsSensitiveEnvName(varName) && varValue != "" { if !isVariableReference(varValue) { - loc := &finding.Location{Path: a.path, Line: itemNode.Line} + loc := &finding.Location{ + Path: a.path, + Line: itemNode.Line, + } f := finding.New("CIS-4.10", "Service '"+serviceName+"' has sensitive variable '"+varName+"' with hardcoded value", finding.SeverityHigh, target). WithDescription("Hardcoding secrets in compose files exposes them in version control."). WithCategory(string(CategoryCompose)). diff --git a/PROJECTS/intermediate/docker-security-audit/tests/integration/compose_test.go b/PROJECTS/intermediate/docker-security-audit/tests/integration/compose_test.go index 5f0fd853..497b2e16 100644 --- a/PROJECTS/intermediate/docker-security-audit/tests/integration/compose_test.go +++ b/PROJECTS/intermediate/docker-security-audit/tests/integration/compose_test.go @@ -632,8 +632,11 @@ func TestComposeAnalyzer_AllFiles(t *testing.T) { "Should have CRITICAL findings", ) } else { - assert.False(t, findings.HasSeverityAtOrAbove(finding.SeverityCritical), - "Should NOT have CRITICAL findings") + assert.False( + t, + findings.HasSeverityAtOrAbove(finding.SeverityCritical), + "Should NOT have CRITICAL findings", + ) } if tc.wantHigh {