diff --git a/policy/checkov/ACRAdminAccountDisabled.azapi.rego b/policy/checkov/ACRAdminAccountDisabled.azapi.rego index ce4fd06..5608b8f 100644 --- a/policy/checkov/ACRAdminAccountDisabled.azapi.rego +++ b/policy/checkov/ACRAdminAccountDisabled.azapi.rego @@ -15,5 +15,5 @@ deny_CKV_AZURE_137 contains reason if { data.utils.is_azure_type(resource.values, "Microsoft.ContainerRegistry/registries") not valid_azapi_container_registry_admin_account_disabled(resource) - reason := sprintf("checkov/CKV_AZURE_137: Ensure ACR admin account is disabled %s", ["https://github.com/bridgecrewio/checkov/blob/main/checkov/terraform/checks/resource/azure/ACRAdminAccountDisabled.py"]) + reason := sprintf("checkov/CKV_AZURE_137: Ensure ACR admin account is disabled %s: https://github.com/bridgecrewio/checkov/blob/main/checkov/terraform/checks/resource/azure/ACRAdminAccountDisabled.py", [resource.address]) } diff --git a/policy/checkov/ACRAdminAccountDisabled.rego b/policy/checkov/ACRAdminAccountDisabled.rego index 5246e2b..e6a1ca9 100644 --- a/policy/checkov/ACRAdminAccountDisabled.rego +++ b/policy/checkov/ACRAdminAccountDisabled.rego @@ -14,5 +14,5 @@ deny_CKV_AZURE_137 contains reason if { resource := data.utils.resource(input, "azurerm_container_registry")[_] not valid_azurerm_container_registry_admin_account_disabled(resource) - reason := sprintf("checkov/CKV_AZURE_137: Ensure ACR admin account is disabled %s", ["https://github.com/bridgecrewio/checkov/blob/main/checkov/terraform/checks/resource/azure/ACRAdminAccountDisabled.py"]) + reason := sprintf("checkov/CKV_AZURE_137: Ensure ACR admin account is disabled %s, https://github.com/bridgecrewio/checkov/blob/main/checkov/terraform/checks/resource/azure/ACRAdminAccountDisabled.py", [resource.address]) } diff --git a/policy/checkov/ACRAnonymousPullDisabled.azapi.rego b/policy/checkov/ACRAnonymousPullDisabled.azapi.rego index c7975b5..2803525 100644 --- a/policy/checkov/ACRAnonymousPullDisabled.azapi.rego +++ b/policy/checkov/ACRAnonymousPullDisabled.azapi.rego @@ -9,11 +9,11 @@ valid_azapi_container_registry_anonymous_pull_disabled(resource) if { } valid_azapi_container_registry_anonymous_pull_disabled(resource) if { - not resource.body.properties.anonymousPullEnabled == resource.body.properties.anonymousPullEnabled + not resource.values.body.properties.anonymousPullEnabled == resource.body.properties.anonymousPullEnabled } valid_azapi_container_registry_anonymous_pull_disabled(resource) if { - resource.body.properties.anonymousPullEnabled == false + resource.values.body.properties.anonymousPullEnabled == false } deny_CKV_AZURE_138 contains reason if {