Sonarcloud is scanning our terraform code for the azurerm_storage_account resource. It reports this: make sure that omitting to log is safe here But there is no text in how can I fix this to show what to do. I am wondering if it wants me to add a logging block, but this is only relevant inside a…

Azurerm_storage_account make sure that omitting to log is safe here

Rules and Languages Report False-positive / False-negative...

sebastien.andrivet (Sebastien Andrivet) November 10, 2023, 9:22am 10

Hi Scott,

This is indeed a false positive and it is related to the other post you mentioned. We have a pending internal ticket to address this issue but it is not yet implemented.

Regards

Sebastien

Topic		Replies	Views
Azurerm_storage_account incorrectly flags log configuration Report False-positive / False-negative... security , azure , iac , terraform , appsec	6	2271	April 5, 2022
S6378, S6308, S6388: False positives for existing resources in Bicep Report False-positive / False-negative... azureresourcemanager , sonarqube-cloud	2	43	August 29, 2024
Vulnerability false positive for Blob Storage Emulator account key Report False-positive / False-negative... scanner , false-positive	5	621	November 14, 2023
Can't ignore false positive code smells on DevOps PR SonarQube Cloud pull-request , azuredevops , sonarqube-cloud	5	654	March 22, 2023
False positive by S6302 and S6400 Report False-positive / False-negative... iac , terraform , sonarqube-cloud	1	18	August 2, 2024

Azurerm_storage_account make sure that omitting to log is safe here

Related topics