fix(sws/cloudfront): wrong check tls version (#928)

Co-authored-by: Adrien Frediani <frediani.adrien@fairway.digital>
tenable · Jul 12, 2021 · 73bcc12 · 73bcc12
1 parent 656744d
commit 73bcc12
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/pkg/runtime/testdata/testpolicies/aws_cloudfront_distribution/cloudfrontNoSecureCiphers.rego b/pkg/runtime/testdata/testpolicies/aws_cloudfront_distribution/cloudfrontNoSecureCiphers.rego
@@ -1,4 +1,4 @@
-package accurics 
+package accurics
 
 {{.prefix}}cloudfrontNoSecureCiphers[retVal]{
     cloudfront = input.aws_cloudfront_distribution[_]
@@ -11,9 +11,9 @@ package accurics
 }
 
 minimumAllowedProtocolVersion(currentVersion) {
-    currentVersion == "TLSv1.1"
+    startswith(currentVersion, "TLSv1.1")
 }
 
 minimumAllowedProtocolVersion(currentVersion) {
-    currentVersion == "TLSv1.2"
-}
+    startswith(currentVersion, "TLSv1.2")
+}