turbot/docker_compliance

Query: docker_container_host_devices_exposed

Usage

powerpipe query docker_compliance.query.docker_container_host_devices_exposed

Steampipe Tables

SQL

select
id as resource,
case
when inspect -> 'HostConfig' -> 'Devices' = '[]'
or inspect -> 'HostConfig' ->> 'Devices' is null then 'ok'
else 'alarm'
end as status,
case
when inspect -> 'HostConfig' -> 'Devices' = '[]'
or inspect -> 'HostConfig' ->> 'Devices' is null then (names ->> 0) || ' host devices not exposed.'
else (names ->> 0) || ' host devices exposed.'
end as reason
, _ctx ->> 'connection_name' as connection_name
from
docker_container;

Controls

The query is being used by the following controls: