1 Release published by 1 person

• 3.2.353

  published Jan 15, 2025

1 Pull request merged by 1 person

• fix(general): Support CVE suppressions with the root file in repo

  #6948 merged Jan 14, 2025

5 Pull requests opened by 4 people

• fix(secrets): Bump detect-secrets to remove azure FPs

  #6949 opened Jan 13, 2025

• chore(general): upgrade Python module packaging

  #6952 opened Jan 15, 2025

• chore(deps): Test cyclonedx update

  #6953 opened Jan 15, 2025

• fix(terraform): Accept TLS 1.3 for Azure web apps and web app slots

  #6956 opened Jan 17, 2025

• chore(general): Add a job to ensure evaluated keys are added to new resource checks

  #6958 opened Jan 17, 2025

25 Issues closed by 2 people

• BaseModuleCheck: locals enrichment fails when two keys share the same prefix

  #6381 closed Jan 18, 2025

• BaseModuleCheck: using locals with deeply nested arguments inside functions causes improper `conf` escaping

  #6380 closed Jan 18, 2025

• Terraform plan scan is hanging from v3.2.65 onwards

  #6223 closed Jan 18, 2025

• Checkov Policy for AWS Cognito

  #6240 closed Jan 18, 2025

• CKV_AWS_339 : Extend EKS version list to include 1.29

  #5973 closed Jan 18, 2025

• [Helm] Issue when pulling chart dependency from OCI registry

  #6350 closed Jan 18, 2025

• Scanning external modules in Terraform

  #6328 closed Jan 18, 2025

• False Positives for CKV_AWS_70

  #6287 closed Jan 18, 2025

• Azure Web Apps - Ensure SCM minimum TLS version is set to 1.2

  #6283 closed Jan 18, 2025

• CKV_AWS_94 should be updated to allow KMS mode: 'SSE-KMS-WITH-SERVICE-ROLE'

  #6237 closed Jan 18, 2025

• Error parsing Bicep conditionals

  #6234 closed Jan 18, 2025

• checkov fail for azurerm_subnet_network_security_group_association

  #6211 closed Jan 18, 2025

• Sarif output does not reflect the enrichment (Terraform plan with --repo-root-for-plan-enrichment)

  #5639 closed Jan 18, 2025

• Adding common K8s kind/object widely used by the organization ( Apart from K8s default kind/object )

  #6210 closed Jan 18, 2025

• Documentation / contributing guide: Where are the Secret Scanning signatures/regex stored?

  #6209 closed Jan 18, 2025

• CloudFormation: All protocols and ports open in Security Group Ingress not recognized

  #6108 closed Jan 18, 2025

• Checkov list severity in GitHub

  #6198 closed Jan 18, 2025

• [CKV_SECRET_6] Only report some violations when run on a formatted JSON plan

  #6184 closed Jan 18, 2025

• Azure Kubernetes Services - If "Planned Maintenance" is used, window duration should be equal or greater than four hours

  #6190 closed Jan 18, 2025

• Support for Azure SQL. Managed Instance (Custom Policy)

  #6123 closed Jan 18, 2025

• False positive on CKV2_AWS_28: "Ensure public facing ALB are protected by WAF"

  #6180 closed Jan 18, 2025

• Azure Key Vault - Ensure RBAC for Azure Key Vault is enabled

  #6164 closed Jan 18, 2025

• Custom yml policy is not matching the contents of Terraform

  #6137 closed Jan 18, 2025

• does not work to specify multiple external-checks-git and external-checks-dir

  #6159 closed Jan 18, 2025

• CKV2_AZURE_41 false positive?

  #6140 closed Jan 14, 2025

6 Issues opened by 6 people

• Unable to skip Argo Workflow checks

  #6957 opened Jan 17, 2025

• CKV2_AWS_49: False positive when endpoint_type not hardcoded

  #6955 opened Jan 17, 2025

• CKV_AZURE_15 - Allow TLS 1.3

  #6954 opened Jan 16, 2025

• Improve YAML Custom Policy for Checking Connection Dependencies

  #6951 opened Jan 15, 2025

• update Python module packaging

  #6950 opened Jan 14, 2025

• [Terraform] Parsing failure due to provider-defined functions in terraform

  #6947 opened Jan 13, 2025

27 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• feat: add support for awscc provider secrets check

  #6647 commented on Jan 18, 2025 • 2 new comments

• platform(terraform): Add eval keys

  #6929 commented on Jan 17, 2025 • 0 new comments

• fix(general): Allow specifying files in a github actions config file

  #6813 commented on Jan 16, 2025 • 0 new comments

• fix(general): update Python version in .gitpod.Dockerfile

  #6739 commented on Jan 18, 2025 • 0 new comments

• fix(general): escape default ignored directories

  #6738 commented on Jan 18, 2025 • 0 new comments

• fix(terraform): Ignored `--external-modules-download-path` flag

  #6676 commented on Jan 15, 2025 • 0 new comments

• chore(general): bump actions/jekyll-build-pages from 1.0.12 to 1.0.13

  #6671 commented on Jan 15, 2025 • 0 new comments

• chore(general): bump stefanzweifel/changelog-updater-action from 1.10.0 to 1.11.0

  #6634 commented on Jan 15, 2025 • 0 new comments

• feat(arm): AzureDefenderDisabledForResManager

  #6617 commented on Jan 15, 2025 • 0 new comments

• feat(arm): NSGRuleUDPAccessRestricted

  #6616 commented on Jan 13, 2025 • 0 new comments

• feat(azure): add new policies for Azure Synapse - arm

  #6542 commented on Jan 15, 2025 • 0 new comments

• feat(general): In toto output format

  #6488 commented on Jan 15, 2025 • 0 new comments

• feat(terraform): add CVK_OKTA_1 to ensure that 2FA is enabled for okta app sign on policy rule

  #6402 commented on Jan 13, 2025 • 0 new comments

• fix(general): Update the SARIF schema URL

  #6304 commented on Jan 13, 2025 • 0 new comments

• fix(general): fix typo dependancies -> dependencies

  #6303 commented on Jan 16, 2025 • 0 new comments

• fix(general): tolerate ${HTTPS_PROXY} without a scheme

  #6235 commented on Jan 13, 2025 • 0 new comments

• feat(terraform): add CKV_AZURE_244 to Ensure Azure Kubernetes Cluster (AKS) doesn't have a MaxSurge superior to 33% if not equal to 'Default'

  #6189 commented on Jan 12, 2025 • 0 new comments

• feat(terraform): Ensure the default IP Restriction action for SCM is set to "Deny"

  #6115 commented on Jan 15, 2025 • 0 new comments

• fix(terraform): fix false positives for CKV_GCP_49

  #6104 commented on Jan 12, 2025 • 0 new comments

• feat(cloudformation): Adding Sse property to SQS Encryption check

  #5870 commented on Jan 12, 2025 • 0 new comments

• Checkov Generating Different Results in Image and Local with the same setups

  #6295 commented on Jan 18, 2025 • 0 new comments

• Checkov fails on `CKV_AZURE_168` if ternary condition is compared to `null`

  #4974 commented on Jan 18, 2025 • 0 new comments

• Issue while using multiple resources blockd

  #6317 commented on Jan 18, 2025 • 0 new comments

• evaluate_try errors with "Amazon EKS Blueprints Addons" Terraform module

  #6581 commented on Jan 18, 2025 • 0 new comments

• in-toto Attestation Framework Output

  #6208 commented on Jan 18, 2025 • 0 new comments

• UnicodeDecodeError not caught & filename giving issues not reported.

  #6290 commented on Jan 18, 2025 • 0 new comments

• S3 External Modules Cannot Be Downloaded, breaking suppressions w/ plan files

  #5895 commented on Jan 15, 2025 • 0 new comments