feat: Refactor SupportHttpTraffic query to use StorageAccounts directly

GeekMasher · GeekMasher · commit d1381aefa4ad · 2025-06-12T11:59:10.000+01:00
diff --git a/ql/src/security/Storage/SupportHttpTraffic.ql b/ql/src/security/Storage/SupportHttpTraffic.ql
@@ -14,7 +14,7 @@
 
 import bicep
 
-from Storage::StorageAccountsProperties properties
-where properties.getSupportsHttpsTrafficOnly() = false
-select properties.getProperty("supportsHttpsTrafficOnly"),
+from Storage::StorageAccounts storageAccount
+where storageAccount.getProperties().supportsHttpsTrafficOnly() = false
+select storageAccount.getProperties().getSupportsHttpsTrafficOnly(),
   "Supports non-HTTPS traffic for storage accounts."
diff --git a/ql/test/queries-tests/security/Storage/SupportHttpTraffic/SupportHttpTraffic.expected b/ql/test/queries-tests/security/Storage/SupportHttpTraffic/SupportHttpTraffic.expected
@@ -1,3 +1 @@
 | http-traffic.bicep:35:31:35:35 | false | Supports non-HTTPS traffic for storage accounts. |
-| http-traffic.bicep:35:31:35:35 | false | Supports non-HTTPS traffic for storage accounts. |
-| http-traffic.bicep:35:31:35:35 | false | Supports non-HTTPS traffic for storage accounts. |

Original file line number	Diff line number	Diff line change
`@@ -1,3 +1 @@`
`1`	`1`	`\| http-traffic.bicep:35:31:35:35 \| false \| Supports non-HTTPS traffic for storage accounts. \|`
`2`		`-\| http-traffic.bicep:35:31:35:35 \| false \| Supports non-HTTPS traffic for storage accounts. \|`
`3`		`-\| http-traffic.bicep:35:31:35:35 \| false \| Supports non-HTTPS traffic for storage accounts. \|`