feat(compliance): Support loading spec by filepath (#1078)

aquasecurity · Nov 23, 2022 · 8a7f5ca · 8a7f5ca
1 parent c4d019e
commit 8a7f5ca
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 2 deletions.
diff --git a/.gitignore b/.gitignore
@@ -17,4 +17,5 @@ vendor/
 *.iml
 .vscode/
 bundle/
-bundle.tar.gz
+bundle.tar.gz
+.DS_Store
diff --git a/internal/specs/loader.go b/internal/specs/loader.go
@@ -4,6 +4,7 @@ import (
  "embed"
  "fmt"
  "io"
+ "os"
  "strings"
 
  "gopkg.in/yaml.v3"
@@ -49,5 +50,12 @@ func init() {
 
 // GetSpec returns the spec content
 func GetSpec(name string) string {
- return complianceSpecMap[name]
+ if spec, ok := complianceSpecMap[name]; ok { // use embedded spec
+ return spec
+ }
+ spec, err := os.ReadFile(strings.TrimPrefix(name, "@")) // use custom spec by filepath
+ if err != nil {
+ return ""
+ }
+ return string(spec)
 }
diff --git a/internal/specs/loader_test.go b/internal/specs/loader_test.go
@@ -16,6 +16,7 @@ func TestLoadSpecs(t *testing.T) {
  {name: "nsa spec", specName: "nsa", wantSpecPath: "./compliance/nsa-1.0.yaml"},
  {name: "awscis1.2", specName: "awscis1.2", wantSpecPath: "./compliance/aws-cis-1.2.yaml"},
  {name: "awscis1.4", specName: "awscis1.4", wantSpecPath: "./compliance/aws-cis-1.4.yaml"},
+ {name: "awscis1.2 by filepath", specName: "@./compliance/aws-cis-1.2.yaml", wantSpecPath: "./compliance/aws-cis-1.2.yaml"},
  {name: "bogus spec", specName: "foobarbaz"},
  }