Introduce insecure NSG

[tjcorr]

This is a sample PR that shows adding in a vulnerable resource. Checkov should raise alerts and the bad resource will get highlighted here using GitHub Advanced Security (GHAS).

[github-actions]

Terraform Plan Output

Click to expand

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create

Terraform will perform the following actions:

  # azurerm_network_security_group.nsg-fail will be created
  + resource "azurerm_network_security_group" "nsg-fail" {
      + id                  = (known after apply)
      + location            = "eastus"
      + name                = "insecureNSG"
      + resource_group_name = "rg-terraform-github-actions"
      + security_rule       = [
          + {
              + access                                     = "Allow"
              + description                                = ""
              + destination_address_prefix                 = "*"
              + destination_address_prefixes               = []
              + destination_application_security_group_ids = []
              + destination_port_range                     = "*"
              + destination_port_ranges                    = []
              + direction                                  = "Inbound"
              + name                                       = "badrule"
              + priority                                   = 100
              + protocol                                   = "*"
              + source_address_prefix                      = "*"
              + source_address_prefixes                    = []
              + source_application_security_group_ids      = []
              + source_port_range                          = "*"
              + source_port_ranges                         = []
            },
        ]
    }

Plan: 1 to add, 0 to change, 0 to destroy.