mcp-server-semgrep/semgrep-rules/terraform/gcp/best-practice/gcp-gke-nodepool-auto-upgrade-enabled.yaml

MCP Server for Semgrep Integration - static code analysis with AI

rules:
    - id: gcp-gke-nodepool-auto-upgrade-enabled
      patterns:
        - pattern: resource
        - pattern-inside: |
              resource "google_container_node_pool" "..." {
              ...
              management {
                ...
                auto_upgrade = false
                ...
              }
              ...
              }
      message: >-
        Ensure 'Automatic node upgrade' is enabled for Kubernetes Clusters
      metadata:
        category: best-practice
        technology:
          - terraform
          - gcp
      languages: [hcl]
      severity: WARNING