github.com/jfrog/frogbot@v1.1.1-0.20231221090046-821a26f50338/testdata/messages/reviewcomment/iac/iac_review_content_standard.md (about)

     1  
     2  ## 🛠️ Infrastructure as Code Vulnerability
     3  <div align='center'>
     4  
     5  | Severity                | Finding                  |
     6  | :---------------------: | :-----------------------------------: |
     7  | ![](https://raw.githubusercontent.com/jfrog/frogbot/master/resources/v2/applicableMediumSeverity.png)<br>  Medium | Missing auto upgrade was detected |
     8  
     9  </div>
    10  
    11  <details>
    12  <summary> <b>Full description</b> </summary>
    13  <br>
    14  
    15  Resource `google_container_node_pool` should have `management.auto_upgrade=true`
    16  
    17  Vulnerable example - 
    18  ```
    19  resource "google_container_node_pool" "vulnerable_example" {
    20      management {
    21       auto_upgrade = false
    22     }
    23  }
    24  ```
    25  
    26  
    27  </details>