github.com/jfrog/frogbot@v1.1.1-0.20231221090046-821a26f50338/testdata/messages/reviewcomment/iac/iac_review_content_simplified.md (about) 1 2 3 --- 4 ## 🛠️ Infrastructure as Code Vulnerability 5 6 --- 7 | Severity | Finding | 8 | :---------------------: | :-----------------------------------: | 9 | Medium | Missing auto upgrade was detected | 10 11 --- 12 ### Full description 13 14 --- 15 Resource `google_container_node_pool` should have `management.auto_upgrade=true` 16 17 Vulnerable example - 18 ``` 19 resource "google_container_node_pool" "vulnerable_example" { 20 management { 21 auto_upgrade = false 22 } 23 } 24 ```