Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

AWS Codecommit URLs marked as suspisious #1805

Open
@multiverseloop

Description

@multiverseloop

I have a terraform module code as below -

module "security_vpc_ap" {  source = "git::codecommit::us-east-1://test?ref=v1.0.0"  name = "test-vpc"  cidr = var.test_cidr  enable_dns_hostnames = true  enable_dns_support   = true  # VPC Flow Logs (Cloudwatch log group and IAM role will be created)  enable_flow_log                      = true  create_flow_log_cloudwatch_log_group = true  create_flow_log_cloudwatch_iam_role  = true  flow_log_max_aggregation_interval    = 60}.

I am running static code analysis tool checkov which has a dependency of gitpython >=3.1.30

failed to get git::codecommit::us-east-1://test?ref=v1.0.0 because of Thecodecommit:: protocol looks suspicious, useallow_unsafe_protocols=True to allow it.

Gitpython complains that the codecommit url is not safe. If I manually install gitpython 3.1.29 then the below error doesnt show but it conflicts with checkov dependency

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions


      [8]ページ先頭

      ©2009-2025 Movatter.jp