Merge pull request #6239 from ministryofjustice/DSOS-2615/fixngo-doma…

…in-controller-static-analysis-fix DSOS-2615: fix static analysis for fixngo domain controllers
ministryofjustice · Feb 16, 2024 · bdb618e · bdb618e
2 parents 9ed57d2 + e3fe87d
commit bdb618e
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/terraform/environments/core-shared-services/ad-fixngo.tf b/terraform/environments/core-shared-services/ad-fixngo.tf
@@ -6,7 +6,7 @@
 
 module "ad_fixngo_ip_addresses" {
   #checkov:skip=CKV_TF_1:Module registry does not support commit hashes for versions
-  source = "github.com/ministryofjustice/modernisation-platform-environments//terraform/modules/ip_addresses"
+  source = "github.com/ministryofjustice/modernisation-platform-environments//terraform/modules/ip_addresses?ref=373164d50013894187bc4fdba80a066ec136c90f"
 }
 
 locals {
@@ -773,6 +773,8 @@ locals {
   }
 }
 
+#egress to internet required for https and is controlled elsewhere, e.g. NACL/firewall
+#trivy:ignore:AVD-AWS-0104
 resource "aws_security_group_rule" "ad_fixngo" {
   for_each = local.ad_fixngo_security_group_rules