Missing security group for router.

# METADATA
# title: Missing security group for router.
# description: |
#   Need to add a security group to your router.
# scope: package
# schemas:
#   - input: schema["cloud"]
# related_resources:
#   - https://pfs.nifcloud.com/help/router/change.htm
# custom:
#   id: NIF-0016
#   long_id: nifcloud-network-add-security-group-to-router
#   aliases:
#     - AVD-NIF-0016
#     - add-security-group-to-router
#     - nifcloud-network-add-security-group-to-router
#     - nifcloud-computing-add-security-group-to-router
#   provider: nifcloud
#   service: network
#   severity: CRITICAL
#   recommended_action: Add security group for all routers
#   input:
#     selector:
#       - type: cloud
#         subtypes:
#           - service: network
#             provider: nifcloud
#   examples: checks/cloud/nifcloud/network/add_security_group_to_router.yaml
package builtin.nifcloud.network.nifcloud0016

import rego.v1

import data.lib.cloud.value

deny contains res if {
	some router in input.nifcloud.network.routers
	without_sg(router)
	res := result.new("Router does not have a security group.", router.securitygroup)
}

without_sg(router) if value.is_empty(router.securitygroup)

without_sg(router) if not router.securitygroup