Fix a dead link + update spellcheck config

Minor repo maint

Signed-off-by: Tim Smith <tsmith84@gmail.com>

.github/actions/spelling/line_forbidden.patterns

@@ -1,12 +1,32 @@
 # Detect common combinations of valid words that are in fact invalid.
 # Useful for brand capitalizations
 
+#
+# Terms to avoid
+#
+
+# s.b. Allow list
+\swhitelist\b
+\swhitelisting\b
+\swhitelisted\b
+\swhite list\b
+\swhite listing\b
+\swhite listed\b
+
+# s.b. Block list
+\sblacklist\b
+\sblacklisting\b
+\sblacklisted\b
+\sblack list\b
+\sblack listing\b
+\sblack listed\b
+
 #
 # Our Terms
 #
 
 # s.b. Mondoo Platform
-# \sthe Mondoo Platform\b results in false positives
+\sthe Mondoo Platform\b
 \sMondoo platform\b
 
 # s.b. Compliance Hub
@@ -44,6 +64,9 @@
 # s.b. on-premises
 \bon-premise\b
 
+# s.b. email
+\be-mail\b
+
 #
 # Product Names
 #
@@ -104,6 +127,10 @@
 \bRedHat\b
 \bRedhat\b
 
+# s.b. EuroLinux
+\bEurolinux\b
+\bEuro Linux\b
+
 # s.b. AlmaLinux
 \bAlma Linux\b
 
@@ -115,6 +142,7 @@
 
 # s.b. CircleCI
 \bCircleCi\b
+\bCircle CI\b
 
 # s.b. AppArmor
 \bApparmor\b
@@ -140,13 +168,37 @@
 \bOpenssl\b
 \bopenSSL\b
 
+# s.b. CloudBees
+\bCloudbees\b
+
+# s.b. System76
+\bSystem 76\b
+
+#
+# HashiCorp Products
+#
+
+# s.b. HashiCorp
+\bHashicorp\b
+
+# s.b. Terraform
+\bTerraForm\b
+
 #
 # Microsoft Products
 #
 
 # s.b. Microsoft
 \bMicroSoft\b
 
+# s.b. PowerPoint
+\bPower Point\b
+\bPowerpoint\b
+
+# s.b. OneNote
+\bOne Note\b
+\bOnenote\b
+
 # s.b. Windows Server
 \bWindows server\b
 
@@ -163,6 +215,25 @@
 \bgroup policy object\b
 \bGroup Policy object\b
 
+# s.b. Power BI
+\bPowerBI\b
+
+# s.b. SharePoint
+\bSharepoint\b
+\bShare Point\b
+
+# s.b. BitLocker
+\bBitlocker\b
+\bbitLocker\b
+
+# s.b. VS Code
+\bVSCode\b
+\bVScode\b
+
+# s.b. LinkedIn
+\bLinked In\b
+\bLinkedin\b
+
 #
 # VMware Products
 #
@@ -200,6 +271,7 @@
 
 # s.b. CloudFormation
 \bCloudformation\b
+\bCloud Formation\b
 
 # s.b. CloudFront
 \bCloudfront\b
@@ -265,6 +337,7 @@
 
 # s.b. Fargate
 \bFarGate\b
+\bFar Gate\b
 
 # s.b. FinSpace
 \bFinSpace\b
@@ -281,6 +354,9 @@
 # s.b. Honeycode
 \bHoneyCode\b
 
+# s.b. Lambda
+\bLamba\b
+
 # s.b. Lightsail
 \bLightSail\b
 
@@ -315,6 +391,9 @@
 # s.b. SiteWise
 \bSitewise\b
 
+# s.b. StackSets
+\bStacksets\b
+
 # s.b. WorkDocs
 \bWorkdocs\b
 
@@ -325,80 +404,82 @@
 # GCP Products
 #
 
-# s.b. Pub/Sub
-\bPubSub\b
+# s.b. AlloyDB
+\bAlloy DB\b
 
-# s.b. Cloud SQL
-\bCloudSQL\b
+# s.b. AppEngine
+\bApp Engine\b
+
+# s.b. BigLake
+\bBig Lake\b
+
+# s.b. BigQuery
+\bBig Query\b
+
+# s.b. Cloud Build
+\bCloudBuild\b
+\bCloud build\b
 
 # s.b. Cloud CDN
 \bCloudCDN\b
 
 # s.b. Cloud Functions
 \bCloud functions\b
 
-# s.b. Vertex AI
-\bVertexAI\b
+# s.b. Cloud Run
+\bCloudRun\b
+\bCloud run\b
 
-# s.b. Dialogflow
-\bDialogFlow\b
+# s.b. Cloud SQL
+\bCloudSQL\b
+
+# s.b. Compute Engine
+\bComputeEngine\b
+\bCompute engine\b
 
 # s.b. Dataplex
 \bDataPlex\b
 
-# s.b. BigLake
-\bBig Lake\b
+# s.b. Datastream
+\bDataStream\b
+\bData Stream\b
 
-# s.b. AlloyDB
-\bAlloy DB\b
+# s.b. Dialogflow
+\bDialogFlow\b
 
 # s.b. Firestore
 \bFireStore\b
 
-# s.b. Datastream
-\bDataStream\b
-\bData Stream\b
+# s.b. gVNIC
+\bGVNIC\b
+
+# s.b. Knative
+\bKNative\b
 
 # s.b. Memorystore
 \bMemoryStore\b
 \bMemory Store\b
 
+# s.b. Pub/Sub
+\bPubSub\b
+
 # s.b. TensorFlow
 \bTensor Flow\b
 
-# s.b. AppEngine
-\bApp Engine\b
-
-# s.b. AppEngine
-\bApp Engine\b
-
-# s.b. Compute Engine
-\bComputeEngine\b
-\bCompute engine\b
+# s.b. Vertex AI
+\bVertexAI\b
 
 # s.b. VMware Engine
 \bVMware engine\b
 \bVMWare Engine\b
 
-# s.b. Knative
-\bKNative\b
-
-# s.b. BigQuery
-\bBig Query\b
-
-# s.b. Cloud Build
-\bCloudBuild\b
-\bCloud build\b
-
-# disabled for now in this repo due to false positives
-# s.b. Cloud Run
-# \bCloudRun\b
-# \bCloud run\b
-
 #
 # Azure Products
 #
 
+# s.b. Azure Pipelines
+\bAzure DevOps Pipelines\b
+
 # s.b. Key Vault
 \bKey vault\b
 \bKeyVault\b

.github/actions/spelling/patterns.txt

@@ -66,3 +66,26 @@ uid:\s.*$
 aws_session_token\s+\=(\s+)?.+
 aws_access_key_id\s+\=(\s+)?.+
 aws_secret_access_key\s+\=(\s+)?.+
+
+# PGP
+\b(?:[0-9A-F]{4} ){9}[0-9A-F]{4}\b
+# GPG keys
+\b(?:[0-9A-F]{4} ){5}(?: [0-9A-F]{4}){5}\b
+
+# uuid
+\b[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}\b
+
+# curl arguments
+\b(?:\\n|)curl(?:\s+-[a-zA-Z]{1,2}\b)*(?:\s+-[a-zA-Z]{3,})(?:\s+-[a-zA-Z]+)*
+
+# set arguments
+\bset(?:\s+-[abefimouxE]{1,2})*\s+-[abefimouxE]{3,}(?:\s+-[abefimouxE]+)*
+
+# tar arguments
+\b(?:\\n|)g?tar(?:\.exe|)(?:(?:\s+--[-a-zA-Z]+|\s+-[a-zA-Z]+|\s[ABGJMOPRSUWZacdfh-pr-xz]+\b)(?:=[^ ]*|))+
+
+# file permissions
+['"`\s][-bcdLlpsw](?:[-r][-w][-Ssx]){2}[-r][-w][-SsTtx]\+?['"`\s]
+
+# score score is valid in MQL docs
+score score

molecule/default/tests/mondoo-installer.mql.yaml

@@ -1,7 +1,7 @@
 # Copyright (c) Mondoo, Inc.
 # SPDX-License-Identifier: BUSL-1.1
 
-# Read more about the policy structure at https://mondoo.com/docs/platform/policies/overview
+# Read more about the policy structure at https://mondoo.com/docs/cnspec/cnspec-policies/write/
 policies:
   - uid: mondoo-installer
     name: Mondoo Installer Verification