horkos 0.2.0

Cloud infrastructure language where insecure code won't compile
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67

// ============================================
// Taint Tracking in Horkos
// ============================================
// When you import external resources, they become "Unverified<T>"
// meaning Horkos can't guarantee their security properties.

// EXAMPLE 1: Importing external data
// -----------------------------------
// Imagine you import a bucket reference from another Terraform state
// or from a data source. Horkos marks it as Unverified.

// This would be an external import (simulated):
// import "external/legacy-bucket" as legacyBucket
// legacyBucket has type: Unverified<Bucket>

// You CAN'T do this - it won't compile:
// val myVpc = Network.createVpc("main", 
//     cidr: "10.0.0.0/16", 
//     flowLogs: legacyBucket  // ❌ Error: expected Bucket, found Unverified<Bucket>
// )

// You MUST explicitly acknowledge the risk:
// val myVpc = unsafe("Using legacy bucket - verified secure in ticket SEC-123") {
//     Network.createVpc("main", 
//         cidr: "10.0.0.0/16", 
//         flowLogs: legacyBucket  // ✅ Allowed - risk acknowledged
//     )
// }


// EXAMPLE 2: Security parameters require unsafe
// ----------------------------------------------
// When you weaken a security default, that's also "tainting" the resource

// This WON'T compile - public bucket without justification:
// val publicBucket = S3.createBucket("website", publicAccess: true)  // ❌

// This WILL compile - risk is acknowledged:
val publicBucket = unsafe("Static website assets - no sensitive data") {
    S3.createBucket("website", publicAccess: true)
}

// EXAMPLE 3: Multiple security weaknesses
// ----------------------------------------
// You can weaken multiple parameters in one unsafe block

val devBucket = unsafe("Dev environment - acceptable risk") {
    S3.createBucket("dev-data",
        publicAccess: true,    // Weakened
        encryption: false,     // Weakened  
        versioning: false      // Weakened
    )
}

// EXAMPLE 4: Secure by default - no unsafe needed
// ------------------------------------------------
// When you don't weaken any security, no unsafe is required

val secureBucket = S3.createBucket("production-data",
    tags: { env: "prod", team: "platform" }
)
// Automatically gets:
// - encryption: true
// - versioning: true
// - publicAccess: false
// - logging: true