fix(terraform): evaluate resource with double underscore (#6642)

* . * . * We are operating under the assumption that the function name will start and end with "__", ensuring that I have at least two of them * We are operating under the assumption that the function name will start and end with "__", ensuring that I have at least two of them
bridgecrewio · Aug 12, 2024 · 2a9f6aa · 2a9f6aa
1 parent 6ab61dd
commit 2a9f6aa
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/checkov/terraform/graph_builder/variable_rendering/safe_eval_functions.py b/checkov/terraform/graph_builder/variable_rendering/safe_eval_functions.py
@@ -355,7 +355,9 @@ def terraform_try(*args: Any) -> Any:
 
 
 def evaluate(input_str: str) -> Any:
-    if "__" in input_str:
+    count_underscores = input_str.count("__")
+    # We are operating under the assumption that the function name will start and end with "__", ensuring that we have at least two of them
+    if count_underscores >= 2:
         logging.debug(f"got a substring with double underscore, which is not allowed. origin string: {input_str}")
         return input_str
     if input_str == "...":

diff --git a/tests/terraform/graph/checks/resources/CustomPolicy1/expected.yaml b/tests/terraform/graph/checks/resources/CustomPolicy1/expected.yaml
@@ -1,2 +1,2 @@
-pass:
+fail:
   - "aws_sqs_queue.sqs"