MEDIUM
Source
Trivy
ID
AVD-OPNSTK-0005

Missing description for security group.

Security groups should include a description for auditing purposes. Simplifies auditing, debugging, and managing security groups.

Impact

Follow the appropriate remediation steps below to resolve the issue.

Add descriptions for all security groups

1
2
3
resource "openstack_networking_secgroup_v2" "group_1" {
  description = "don't let just anyone in"
}