SG-031: Public Network Bind

Severity: HIGH

Service or firewall rule binding to 0.0.0.0 / 0.0.0.0/0

Fires when

• A firewall or security-group rule opens ingress to the any-source CIDR 0.0.0.0/0
• An AWS security group sets CidrIp to 0.0.0.0/0
• A GCP firewall sets source_ranges to 0.0.0.0/0
• An IPv6 firewall rule allows the any-source range ::/0

Remediation

No safe remediation: a file that triggers this rule should be rejected, not patched. Read the flagged lines in the source before deciding.