feat: Update Resource, Databases and add public resource concept

Author: GeekMasher

ql/lib/codeql/bicep/Concepts.qll

@@ -1,2 +1,12 @@
 private import codeql.bicep.AST
 private import codeql.bicep.CFG
+
+/**
+ *  A Public Resource is a resource that is publicly accessible to the Internet.
+ */
+abstract class PublicResource extends Resource {
+    /**
+     *  Returns the property that indicates public access.
+     */
+    abstract Expr getPublicAccessProperty();
+}

ql/lib/codeql/bicep/ast/Resources.qll

@@ -3,7 +3,6 @@ private import codeql.Locations
 private import Expr
 private import Idents
 private import Literals
-
 private import internal.ResourceDeclaration
 private import internal.ObjectProperty
 private import internal.Object
@@ -79,7 +78,6 @@ Resource resolveResource(Expr expr) {
   )
 }
 
-
 class Resource extends TResource {
   private ResourceDeclaration resource;
 
@@ -89,10 +87,15 @@ class Resource extends TResource {
     exists(StringLiteral sl | sl = resource.getName() | result = sl.getValue())
   }
 
-  Expr getProperty(string name) {
-    result = resource.getProperty(name)
+  string getName() {
+    exists(StringLiteral name |
+      name = resource.getProperty("name") and
+      result = name.getValue()
+    )
   }
 
+  Expr getProperty(string name) { result = resource.getProperty(name) }
+
   Resource getParent() { result = resolveResource(this.getProperty("parent")) }
 
   string toString() { result = resource.toString() }

ql/lib/codeql/bicep/frameworks/Microsoft/Databases.qll

@@ -1,4 +1,5 @@
 private import bicep
+private import codeql.bicep.Concepts
 
 module Databases {
   /**
@@ -28,6 +29,10 @@ module Databases {
       result = this.getProperties().getProperty("version").(StringLiteral).getValue()
     }
 
+    string publicNetworkAccess() {
+      result = this.getProperties().getProperty("publicNetworkAccess").(StringLiteral).getValue()
+    }
+
     /**
      * Returns the sslEnforcement property of the database resource, if present.
      */
@@ -222,6 +227,19 @@ module Databases {
     override string databaseType() { result = "arc-sql-managed-instance" }
   }
 
+  class PublicDatabaseResource extends PublicResource {
+    private DatabaseResource database;
+
+    PublicDatabaseResource() {
+      database.publicNetworkAccess() = "Enabled" and
+      this = database
+    }
+
+    override Expr getPublicAccessProperty() {
+      result = database.getProperties().getProperty("publicNetworkAccess")
+    }
+  }
+
   module DatabaseProperties {
     /**
      * Represents the properties object for a database resource.