feat: Add Database TLS version

GeekMasher · GeekMasher · commit 184bfbee16be · 2025-06-11T11:07:22.000+01:00
diff --git a/ql/lib/codeql/bicep/frameworks/Microsoft/Databases.qll b/ql/lib/codeql/bicep/frameworks/Microsoft/Databases.qll
@@ -240,6 +240,12 @@ module Databases {
     }
   }
 
+  class WeakDatabaseTlsVersion extends Cryptography::WeakTlsVersion instanceof DatabaseResource {
+    override Expr getWeakTlsVersionProperty() {
+      result = DatabaseResource.super.getProperties().getProperty("minimalTlsVersion")
+    }
+  }
+
   module DatabaseProperties {
     /**
      * Represents the properties object for a database resource.

Original file line number	Diff line number	Diff line change
`@@ -240,6 +240,12 @@ module Databases {`
`240`	`240`	`}`
`241`	`241`	`}`
`242`	`242`
	`243`	`+ class WeakDatabaseTlsVersion extends Cryptography::WeakTlsVersion instanceof DatabaseResource {`
	`244`	`+ override Expr getWeakTlsVersionProperty() {`
	`245`	`+ result = DatabaseResource.super.getProperties().getProperty("minimalTlsVersion")`
	`246`	`+ }`
	`247`	`+ }`
	`248`	`+`
`243`	`249`	`module DatabaseProperties {`
`244`	`250`	`/**`
`245`	`251`	`* Represents the properties object for a database resource.`