clean up message and references

semgrep · Dec 17, 2024 · 6f6088a · 6f6088a
1 parent 3abd6cf
commit 6f6088a
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/terraform/gcp/security/gcp-sql-database-require-ssl.yaml b/terraform/gcp/security/gcp-sql-database-require-ssl.yaml
@@ -39,7 +39,8 @@ rules:
     - terraform
     - gcp
     references:
-    - https://owasp.org/Top10/A02_2021-Cryptographic_Failures
+    - "https://cloud.google.com/sql/docs/postgres/admin-api/rest/v1/instances#ipconfiguration"
+    - "https://owasp.org/Top10/A02_2021-Cryptographic_Failures"
     subcategory:
     - vuln
     likelihood: LOW

diff --git a/terraform/gcp/security/gcp-sql-database-ssl-insecure-value-postgres-mysql.yaml b/terraform/gcp/security/gcp-sql-database-ssl-insecure-value-postgres-mysql.yaml
@@ -34,7 +34,7 @@ rules:
   fix: |
     "TRUSTED_CLIENT_CERTIFICATE_REQUIRED"
   message: >-
-    $VALUE Ensure all Cloud SQL database instance require incoming connections to use SSL. To enable this for PostgresSQL and MySQL, use `ssl_mode="TRUSTED_CLIENT_CERTIFICATE_REQUIRED"`.
+    Ensure all Cloud SQL database instance require incoming connections to use SSL. To enable this for PostgresSQL and MySQL, use `ssl_mode="TRUSTED_CLIENT_CERTIFICATE_REQUIRED"`.
   metadata:
     owasp:
     - A03:2017 - Sensitive Data Exposure