Add missing ifs

cisagov · Jan 3, 2024 · ef10861 · ef10861
1 parent d194196
commit ef10861
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/rego/Commoncontrols.rego b/rego/Commoncontrols.rego
@@ -1340,7 +1340,7 @@ if {
 Apps := {"Blogger", "Google Books", "Google Pay", "Google Photos", "Google Play",
     "Google Play Console", "Location History", "YouTube"}
 
-AppsAllowingTakoutOU contains App {
+AppsAllowingTakoutOU contains App if {
     Events := utils.FilterEventsNoOU(LogEvents, "UserTakeoutSettingsProto User Takeout ")
     some App in Apps
     Filtered := {Event | some Event in Events; Event.AppName == App; Event.OrgUnit == data.OrgUnit}
@@ -1352,7 +1352,7 @@ AppsAllowingTakoutOU contains App {
     LastEvent.NewValue != "DELETE_APPLICATION_SETTING"
 }
 
-NonCompliantOUs14_1 contains OU {
+NonCompliantOUs14_1 contains OU if {
     some OU in utils.OUsWithEvents
     Events := utils.FilterEvents(LogEvents, "UserTakeoutSettingsProto User Takeout ", OU)
     count(Events) > 0 # Ignore OUs without any events. We're already