feat(cognito): Add new checks related with cognito service #3898

pedrooot · 2024-04-30T07:41:39Z

Description

New checks related with cognito service for aws are added:

cognito_user_pool_temporary_password_expiration -> Cognito user pools temporary passwords set by administrators expire in 7 days or less
cognito_user_pool_password_policy_lowercase -> Ensure Cognito User Pool has password policy to require at least one lowercase letter
cognito_user_pool_password_policy_minimum_length_14 -> Ensure that the password policy for your user pools require a minimum length of 14 or greater
cognito_user_pool_password_policy_number -> Ensure that the password policy for your user pool requires a number
cognito_user_pool_password_policy_symbol -> Ensure that the password policy for your Amazon Cognito user pool requires at least one symbol.
cognito_user_pool_password_policy_uppercase -> Ensure that the password policy for your user pool requires at least one uppercase letter
cognito_user_pool_mfa_enabled -> Cognito user pools require multi factor authentication (MFA)
cognito_user_pool_web_acl_associated -> Cognito user pools should be protected by AWS Web Application Firewall
cognito_user_pool_prevent_reveal_user_existence -> Cognito user pools should prevent error messages that reveal user existence
cognito_user_pool_token_revocation_enabled -> Cognito user pools should have enabled token revocation
cognito_user_pool_advanced_security_enabled -> Cognito user pools has advanced security enabled with full-function
cognito_user_pool_advanced_security_block_sign_in_compromised_credentials -> Cognito user pools has advanced security enabled with full-function to block sign-in by users with suspected compromised credentials
cognito_user_pool_advanced_security_adaptative_authentication_block_sign_in -> Cognito user pools has advanced security enabled with full-function with adaptive authentication automatic risk response as block sign-in
cognito_user_pool_deletion_protection_enabled -> Cognito user pools deletion protection enabled to prevent accidental deletion
cognito_user_pool_self_registration_enabled -> Self-registration is enabled on the user pools and it is associated with an identity pool (and show the roles that can be asssumed)
cognito_identity_pool_guest_access_enabled -> Guest access is enabled on the identity pool(and show the roles that can be assumed)

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

jfagoagas · 2024-04-30T10:47:52Z

...block_sign_in/cognito_user_pool_advanced_security_adaptative_authentication_block_sign_in.py

+ report.resource_arn = pool.arn
+ if (
+ pool.advanced_security_mode == "ENFORCED"
+ and pool.risk_configuration.account_takeover_risk_configuration.get(


I think it'd be better to map this into an object.

Yes, good point

jfagoagas · 2024-04-30T10:48:07Z

...block_sign_in/cognito_user_pool_advanced_security_adaptative_authentication_block_sign_in.py

+ == "BLOCK"
+ ):
+ report.status = "PASS"
+ report.status_extended = f"User pool {pool.id} has advanced security enforced with adaptative authentication sign-in blocked."


Please get the tags in the service, check other AWS services for that.

codecov · 2024-05-02T08:44:12Z

Codecov Report

Attention: Patch coverage is 92.99363% with 33 lines in your changes are missing coverage. Please review.

Project coverage is 86.44%. Comparing base (a54a0dd) to head (8e2fb36).
Report is 18 commits behind head on master.

Files	Patch %	Lines
.../providers/aws/services/cognito/cognito_service.py	79.85%	28 Missing ⚠️
...cognito_user_pool_temporary_password_expiration.py	90.47%	2 Missing ⚠️
...wler/providers/aws/services/wafv2/wafv2_service.py	33.33%	2 Missing ⚠️
...ed/cognito_user_pool_self_registration_disabled.py	96.42%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #3898      +/-   ##
==========================================
+ Coverage   86.37%   86.44%   +0.06%     
==========================================
  Files         748      767      +19     
  Lines       23333    23856     +523     
==========================================
+ Hits        20155    20622     +467     
- Misses       3178     3234      +56

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

sergargar · 2024-05-07T09:55:33Z

..._identity_pool_guest_access_enabled/cognito_identity_pool_guest_access_enabled.metadata.json

@@ -0,0 +1,30 @@
+{
+ "Provider": "aws",
+ "CheckID": "cognito_identity_pool_guest_access_enabled",


Suggested change

"CheckID": "cognito_identity_pool_guest_access_enabled",

"CheckID": "cognito_identity_pool_guest_access_disabled",

sergargar · 2024-05-07T09:58:38Z

...ito/cognito_identity_pool_guest_access_enabled/cognito_identity_pool_guest_access_enabled.py

+ f"Identity pool {identity_pool.id} has guest access enabled."
+ )
+ if identity_pool.roles.unauthenticated:
+ report.status_extended = f"Identity pool {identity_pool.id} has guest access enabled and unauthenticated role {identity_pool.roles.unauthenticated} defined."


Suggested change

report.status_extended = f"Identity pool {identity_pool.id} has guest access enabled and unauthenticated role {identity_pool.roles.unauthenticated} defined."

report.status_extended = f"Identity pool {identity_pool.id} has guest access enabled assuming the role {identity_pool.roles.unauthenticated}."

sergargar · 2024-05-07T10:01:19Z

prowler/providers/aws/services/cognito/cognito_service.py

+ ].describe_user_pool_client(
+ UserPoolId=user_pool.id,
+ ClientId=self.regional_clients[
+ user_pool.region
+ ].list_user_pool_clients(UserPoolId=user_pool.id)[
+ "UserPoolClients"


Please, create two different functions for the describe and list calls.

sergargar · 2024-05-07T10:07:00Z

prowler/providers/aws/services/cognito/cognito_service.py

- tags: Optional[list] = []
+ tags: Optional[dict]
+ account_recovery_settings: Optional[dict]
+ user_pool_client: Optional[UserPoolClient]


Please, create a list of UserPoolClient since there can be more than one.

sergargar · 2024-05-07T10:11:11Z

prowler/providers/aws/services/cognito/cognito_service.py

+ account_takeover_risk_configuration: Optional[AccountTakeoverRiskConfiguration]
+
+
+class UserPoolClient(BaseModel):


Please add the ID and Name of the client when doing the list

sergargar · 2024-05-07T10:17:18Z

...o/cognito_user_pool_advanced_security_enabled/cognito_user_pool_advanced_security_enabled.py

+ elif pool.advanced_security_mode == "AUDIT":
+ report.status = "FAIL"
+ report.status_extended = (
+ f"User pool {pool.id} has advanced security audit enabled."


Suggested change

f"User pool {pool.id} has advanced security audit enabled."

f"User pool {pool.id} has advanced security enabled but with audit-only mode."

sergargar · 2024-05-07T10:17:32Z

...o/cognito_user_pool_advanced_security_enabled/cognito_user_pool_advanced_security_enabled.py

+ if pool.advanced_security_mode == "ENFORCED":
+ report.status = "PASS"
+ report.status_extended = (
+ f"User pool {pool.id} has advanced security enforced."


Suggested change

f"User pool {pool.id} has advanced security enforced."

f"User pool {pool.id} has advanced security enforced with full-function mode."

sergargar · 2024-05-07T10:22:37Z

...o_user_pool_prevent_reveal_user_existence/cognito_user_pool_prevent_reveal_user_existence.py

+ report.resource_id = pool.id
+ report.resource_arn = pool.arn
+ report.resource_tags = pool.tags
+ if pool.user_pool_client.prevent_user_existence_errors == "ENABLED":


Please, iterate for each client and add a finding for each one.

The resource ID and name must be the user_pool_client one.

sergargar · 2024-05-07T10:23:59Z

..._prevent_reveal_user_existence/cognito_user_pool_prevent_reveal_user_existence.metadata.json

@@ -0,0 +1,30 @@
+{
+ "Provider": "aws",
+ "CheckID": "cognito_user_pool_prevent_reveal_user_existence",


Suggested change

"CheckID": "cognito_user_pool_prevent_reveal_user_existence",

"CheckID": "cognito_user_pool_client_prevent_user_existence_errors",

sergargar · 2024-05-07T10:26:55Z

...o/cognito_user_pool_self_registration_enabled/cognito_user_pool_self_registration_enabled.py

+ else:
+ associated_identity_pools.append(identity_pool.name)
+ if associated_identity_pools:
+ report.status_extended = f"User pool {user_pool.id} has self registration enabled and is associated with the following identity pools: {(', ').join(associated_identity_pools)}"


Suggested change

report.status_extended = f"User pool {user_pool.id} has self registration enabled and is associated with the following identity pools: {(', ').join(associated_identity_pools)}"

report.status_extended = f"User pool {user_pool.id} has self registration enabled assuming the role(s): {(', ').join(associated_identity_pools)}"

sergargar · 2024-05-07T10:27:23Z

...o/cognito_user_pool_self_registration_enabled/cognito_user_pool_self_registration_enabled.py

+ report.status_extended = (
+ f"User pool {user_pool.id} has self registration enabled."
+ )
+ associated_identity_pools = []


Suggested change

associated_identity_pools = []

associated_identity_pool_authenticated_roles = []

sergargar · 2024-05-07T10:27:37Z

...ser_pool_self_registration_enabled/cognito_user_pool_self_registration_enabled.metadata.json

@@ -0,0 +1,30 @@
+{
+ "Provider": "aws",
+ "CheckID": "cognito_user_pool_self_registration_enabled",


Suggested change

"CheckID": "cognito_user_pool_self_registration_enabled",

"CheckID": "cognito_user_pool_self_registration_disabled",

sergargar · 2024-05-07T10:55:43Z

...in/cognito_user_pool_advanced_security_adaptative_authentication_block_sign_in.metadata.json

+ "CheckTitle": "Ensure cognito user pools has advanced security enabled with full-function with adaptive authentication automatic risk response as block sign-in",
+ "CheckType": [],
+ "ServiceName": "cognito",
+ "SubServiceName": "",
+ "ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
+ "Severity": "medium",
+ "ResourceType": "AwsCognitoUserPool",
+ "Description": "Amazon Cognito advanced security features provide adaptive authentication and protection against compromised credentials. Adaptive authentication helps protect your applications from malicious actors and compromised credentials by evaluating the risk associated with each user login and providing the appropriate level of security to mitigate that risk. Adaptive authentication is a feature of advanced security that uses contextual data and intelligent mechanisms to evaluate the risk of each authentication attempt and respond with the appropriate level of security. Adaptive authentication can be configured to block sign-in when the risk is too high.",
+ "Risk": "If adaptive authentication is not enabled, your user pool is more vulnerable to attacks that use compromised credentials. Adaptive authentication helps protect your applications from malicious actors and compromised credentials by evaluating the risk associated with each user login and providing the appropriate level of security to mitigate that risk.",
+ "RelatedUrl": "https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html",
+ "Remediation": {
+ "Code": {
+ "CLI": "",
+ "NativeIaC": "",
+ "Other": "",
+ "Terraform": ""
+ },
+ "Recommendation": {
+ "Text": "To enable adaptive authentication with automatic risk response as block sign-in, follow the Amazon Cognito documentation",
+ "Url": "https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html"


Review this again with the new check name.

sergargar · 2024-05-07T10:56:22Z

...block_sign_in/cognito_user_pool_advanced_security_adaptative_authentication_block_sign_in.py

+ ]
+ ):
+ report.status = "PASS"
+ report.status_extended = f"User pool {pool.id} has advanced security enforced with adaptative authentication sign-in blocked."


Suggested change

report.status_extended = f"User pool {pool.id} has advanced security enforced with adaptative authentication sign-in blocked."

report.status_extended = f"User pool {pool.id} blocks all potential malicious sign-in attempts."

sergargar · 2024-05-07T10:58:04Z

...block_sign_in/cognito_user_pool_advanced_security_adaptative_authentication_block_sign_in.py

+ if pool.advanced_security_mode == "ENFORCED" and all(
+ [
+ pool.risk_configuration.account_takeover_risk_configuration.low_action
+ and pool.risk_configuration.account_takeover_risk_configuration.low_action.get(


omit the EventAction attribute and add it in the service to the action

sergargar · 2024-05-07T10:58:28Z

...block_sign_in/cognito_user_pool_advanced_security_adaptative_authentication_block_sign_in.py

+ report.status_extended = f"User pool {pool.id} has advanced security enforced with adaptative authentication sign-in blocked."
+ else:
+ report.status = "FAIL"
+ report.status_extended = f"User pool {pool.id} does not have advanced security enforced with adaptative authentication sign-in blocked."


Suggested change

report.status_extended = f"User pool {pool.id} does not have advanced security enforced with adaptative authentication sign-in blocked."

report.status_extended = f"User pool {pool.id} does not block all potential malicious sign-in attempts."

sergargar · 2024-05-07T11:01:09Z

...ials/cognito_user_pool_advanced_security_block_sign_in_compromised_credentials.metadata.json

@@ -0,0 +1,30 @@
+{
+ "Provider": "aws",
+ "CheckID": "cognito_user_pool_advanced_security_block_sign_in_compromised_credentials",


Suggested change

"CheckID": "cognito_user_pool_advanced_security_block_sign_in_compromised_credentials",

"CheckID": "cognito_user_pool_blocks_compromised_credentials_sign_in_attempts",

sergargar · 2024-05-07T11:01:54Z

...ials/cognito_user_pool_advanced_security_block_sign_in_compromised_credentials.metadata.json

+ "CheckTitle": "Ensure cognito user pools has advanced security enabled with full-function to block sign-in by users with suspected compromised credentials",
+ "CheckType": [],
+ "ServiceName": "cognito",
+ "SubServiceName": "",
+ "ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
+ "Severity": "medium",
+ "ResourceType": "AwsCognitoUserPool",
+ "Description": "Checks whether advanced security features are enabled for an Amazon Cognito User Pool to block sign-in by users with suspected compromised credentials.",
+ "Risk": "If advanced security features are not enabled for an Amazon Cognito User Pool, the user pool will not be able to block sign-in by users with suspected compromised credentials.",
+ "RelatedUrl": "https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html",
+ "Remediation": {
+ "Code": {
+ "CLI": "",
+ "NativeIaC": "",
+ "Other": "",
+ "Terraform": ""
+ },
+ "Recommendation": {
+ "Text": "To enable advanced security features for an Amazon Cognito User Pool, follow the steps in the Amazon Cognito Developer Guide.",
+ "Url": "https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html"
+ }


Review this again with the new check name.

sergargar · 2024-05-07T11:02:40Z

...sed_credentials/cognito_user_pool_advanced_security_block_sign_in_compromised_credentials.py

+ ):
+ print(pool.risk_configuration)
+ report.status = "PASS"
+ report.status_extended = f"User pool {pool.id} has advanced security enforced with compromised credentials sign-in blocked."


Suggested change

report.status_extended = f"User pool {pool.id} has advanced security enforced with compromised credentials sign-in blocked."

report.status_extended = f"User pool {pool.id} block sign-in attempts with suspected compromised credentials."

sergargar · 2024-05-07T11:02:54Z

...sed_credentials/cognito_user_pool_advanced_security_block_sign_in_compromised_credentials.py

+ report.status_extended = f"User pool {pool.id} has advanced security enforced with compromised credentials sign-in blocked."
+ else:
+ report.status = "FAIL"
+ report.status_extended = f"User pool {pool.id} does not have advanced security enforced with compromised credentials sign-in blocked."


Suggested change

report.status_extended = f"User pool {pool.id} does not have advanced security enforced with compromised credentials sign-in blocked."

report.status_extended = f"User pool {pool.id} does not have advanced security enforced with compromised credentials sign-in blocked."

Suggested change

report.status_extended = f"User pool {pool.id} does not have advanced security enforced with compromised credentials sign-in blocked."

report.status_extended = f"User pool {pool.id} does not block sign-in attempts with suspected compromised credentials."

sergargar

Please, review my comments. Good job 🔝

sergargar · 2024-05-07T11:04:34Z

...sed_credentials/cognito_user_pool_advanced_security_block_sign_in_compromised_credentials.py

+ )
+ == "BLOCK"
+ ):
+ print(pool.risk_configuration)


Suggested change

print(pool.risk_configuration)

sergargar · 2024-05-07T11:06:17Z

Please, remove all report.resource_name and add the name of the resource to the status extended.

sergargar · 2024-05-07T16:40:17Z

...ntials_sign_in_attempts/cognito_user_pool_blocks_compromised_credentials_sign_in_attempts.py

+ == "BLOCK"
+ ):
+ report.status = "PASS"
+ report.status_extended = f"User pool {pool.name} block sign-in attempts with suspected compromised credentials."


Suggested change

report.status_extended = f"User pool {pool.name} block sign-in attempts with suspected compromised credentials."

report.status_extended = f"User pool {pool.name} blocks sign-in attempts with suspected compromised credentials."

sergargar · 2024-05-07T16:42:06Z

...ient_prevent_user_existence_errors/cognito_user_pool_client_prevent_user_existence_errors.py

+ report = Check_Report_AWS(self.metadata())
+ report.region = pool.region
+ report.resource_id = user_pool_client.id
+ report.resource_arn = pool.arn


Would not be the user_pool_client.arn and user_pool_client.region?

sergargar · 2024-05-07T16:43:14Z

...ient_prevent_user_existence_errors/cognito_user_pool_client_prevent_user_existence_errors.py

+ report.resource_tags = pool.tags
+ if user_pool_client.prevent_user_existence_errors == "ENABLED":
+ report.status = "PASS"
+ report.status_extended = f"User pool client {user_pool_client.name} has prevent user existence reveal enabled."


Suggested change

report.status_extended = f"User pool client {user_pool_client.name} has prevent user existence reveal enabled."

report.status_extended = f"User pool client {user_pool_client.name} prevents revealing users in existence errors."

sergargar · 2024-05-07T16:43:31Z

...ient_prevent_user_existence_errors/cognito_user_pool_client_prevent_user_existence_errors.py

+ report.status_extended = f"User pool client {user_pool_client.name} has prevent user existence reveal enabled."
+ else:
+ report.status = "FAIL"
+ report.status_extended = f"User pool client {user_pool_client.name} has prevent user existence reveal disabled."


Suggested change

report.status_extended = f"User pool client {user_pool_client.name} has prevent user existence reveal disabled."

report.status_extended = f"User pool client {user_pool_client.name} does not prevent revealing users in existence errors."

sergargar · 2024-05-07T16:44:07Z

...er_pool_client_token_revocation_enabled/cognito_user_pool_client_token_revocation_enabled.py

+ report.region = pool.region
+ report.resource_id = pool_client.id
+ report.resource_arn = pool.arn
+ report.resource_tags = pool.tags


Would not it be with the pool_client attributes?

Yes, for all but not for tags since user pool clients don't have tags 😀

sergargar

Good job! Last few changes left :)

jfagoagas · 2024-05-08T08:09:50Z

...ntials_sign_in_attempts/cognito_user_pool_blocks_compromised_credentials_sign_in_attempts.py

+ pool.advanced_security_mode == "ENFORCED"
+ and "SIGN_IN"
+ in pool.risk_configuration.compromised_credentials_risk_configuration.event_filter
+ and pool.risk_configuration.compromised_credentials_risk_configuration.actions.get(


Could you store this into the class object instead of doing a get in the map?

jfagoagas · 2024-05-08T08:10:23Z

...o/cognito_user_pool_password_policy_lowercase/cognito_user_pool_password_policy_lowercase.py

+ report.resource_arn = pool.arn
+ report.resource_tags = pool.tags
+ if pool.password_policy:
+ if pool.password_policy.get("RequireLowercase", False):


Could you store this into the class object instead of doing a get in the map?

jfagoagas · 2024-05-08T08:10:38Z

...cognito_user_pool_self_registration_disabled/cognito_user_pool_self_registration_disabled.py

+ report.status_extended = (
+ f"User pool {user_pool.id} has self registration disabled."
+ )
+ if not user_pool.admin_create_user_config.get(


Could you store this into the class object instead of doing a get in the map?

jfagoagas

💯

pedrooot added 2 commits April 29, 2024 18:10

feat(cognito): add new checks related with cognito service

674443e

feat(test): add tests to new checks

23390c1

pedrooot added the no-merge Please, DO NOT MERGE this PR. label Apr 30, 2024

pedrooot requested review from a team as code owners April 30, 2024 07:41

github-actions bot added the provider/aws Issues/PRs related with the AWS provider label Apr 30, 2024

pedrooot added 4 commits April 30, 2024 11:45

feat(cognito): add new check and fix tests

983b564

feat(cognito): improve tests

aa98ae6

feat(cognito): improve code

399a4ae

docs: update docs

50e99b5

jfagoagas requested changes Apr 30, 2024

View reviewed changes

pedrooot added 3 commits April 30, 2024 19:09

resolve comments

c83dc80

fix tests

fedf995

fix tests

28e83a4

pedrooot added 2 commits May 6, 2024 17:57

Merge branch 'master' into cognito-checks

70cf29d

fix tests

bef8f65

sergargar removed the no-merge Please, DO NOT MERGE this PR. label May 6, 2024

sergargar reviewed May 7, 2024

View reviewed changes

sergargar requested changes May 7, 2024

View reviewed changes

sergargar reviewed May 7, 2024

View reviewed changes

pedrooot added 2 commits May 7, 2024 17:54

resolve comments

9288ca0

docs: update number

45100c7

pedrooot requested a review from sergargar May 7, 2024 16:07

sergargar reviewed May 7, 2024

View reviewed changes

sergargar requested changes May 7, 2024

View reviewed changes

jfagoagas reviewed May 8, 2024

View reviewed changes

resolve comments

8e2fb36

sergargar approved these changes May 8, 2024

View reviewed changes

jfagoagas self-requested a review May 8, 2024 15:24

jfagoagas approved these changes May 8, 2024

View reviewed changes

jfagoagas merged commit 225e12b into master May 8, 2024
11 checks passed

jfagoagas deleted the cognito-checks branch May 8, 2024 15:25

pedrooot added a commit that referenced this pull request May 15, 2024

feat(cognito): Add new checks related with cognito service (#3898)

89a6179

	"CheckID": "cognito_identity_pool_guest_access_enabled",
	"CheckID": "cognito_identity_pool_guest_access_disabled",

	report.status_extended = f"Identity pool {identity_pool.id} has guest access enabled and unauthenticated role {identity_pool.roles.unauthenticated} defined."
	report.status_extended = f"Identity pool {identity_pool.id} has guest access enabled assuming the role {identity_pool.roles.unauthenticated}."

		account_takeover_risk_configuration: Optional[AccountTakeoverRiskConfiguration]


		class UserPoolClient(BaseModel):

	f"User pool {pool.id} has advanced security audit enabled."
	f"User pool {pool.id} has advanced security enabled but with audit-only mode."

	"CheckID": "cognito_user_pool_prevent_reveal_user_existence",
	"CheckID": "cognito_user_pool_client_prevent_user_existence_errors",

	report.status_extended = f"User pool {user_pool.id} has self registration enabled and is associated with the following identity pools: {(', ').join(associated_identity_pools)}"
	report.status_extended = f"User pool {user_pool.id} has self registration enabled assuming the role(s): {(', ').join(associated_identity_pools)}"

	associated_identity_pools = []
	associated_identity_pool_authenticated_roles = []

	"CheckID": "cognito_user_pool_self_registration_enabled",
	"CheckID": "cognito_user_pool_self_registration_disabled",

	report.status_extended = f"User pool {pool.id} has advanced security enforced with adaptative authentication sign-in blocked."
	report.status_extended = f"User pool {pool.id} blocks all potential malicious sign-in attempts."

	"CheckID": "cognito_user_pool_advanced_security_block_sign_in_compromised_credentials",
	"CheckID": "cognito_user_pool_blocks_compromised_credentials_sign_in_attempts",

	report.status_extended = f"User pool client {user_pool_client.name} has prevent user existence reveal enabled."
	report.status_extended = f"User pool client {user_pool_client.name} prevents revealing users in existence errors."

feat(cognito): Add new checks related with cognito service #3898

feat(cognito): Add new checks related with cognito service #3898

Conversation

pedrooot commented Apr 30, 2024 • edited

Description

License

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

codecov bot commented May 2, 2024 • edited

Codecov Report

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

sergargar left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

sergargar commented May 7, 2024

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

sergargar left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

jfagoagas left a comment

Choose a reason for hiding this comment

pedrooot commented Apr 30, 2024 •

edited

codecov bot commented May 2, 2024 •

edited