Checkmarx/kics issues and pull requests

#7139 - fix(cloudformation): query API Gateway V2 Stage Access Logging Settings Not Defined with FP

Pull Request - State: open - Opened by ArturRibeiro-CX 12 days ago - 1 comment
Labels: query, cloudformation, aws

#7138 - feat(query): add new query for tencentcloud TKE resource

Pull Request - State: open - Opened by SevenEarth 12 days ago - 1 comment
Labels: feature request, query, community

#7137 - feat(query): add new query for tencentcloud TKE resource

Pull Request - State: closed - Opened by SevenEarth 12 days ago - 2 comments
Labels: feature request, query, community

#7136 - feat(query): add new query for tencentcloud CVM resource

Pull Request - State: open - Opened by SevenEarth 14 days ago - 2 comments
Labels: feature request, query, community

#7135 - feat(query): add new query for tencentcloud CLB resource

Pull Request - State: closed - Opened by SevenEarth 14 days ago - 1 comment
Labels: feature request, query, community

#7134 - feat(query): add new query for tencentcloud CDB resource

Pull Request - State: open - Opened by SevenEarth 14 days ago - 3 comments
Labels: feature request, query, community

#7133 - feat(query): add new query for tencentcloud VPC resource

Pull Request - State: open - Opened by SevenEarth 15 days ago - 2 comments
Labels: feature request, query, community

#7132 - ci(deps): bump chainguard/go from `3315897` to `5e63488`

Pull Request - State: open - Opened by dependabot[bot] 15 days ago
Labels: docker, dependencies

#7131 - feat(query): add new query for tencentcloud TKE resource

Pull Request - State: closed - Opened by SevenEarth 15 days ago - 3 comments
Labels: feature request, query, community

#7130 - docs(queries): update queries catalog

Pull Request - State: open - Opened by kicsbot 15 days ago - 1 comment
Labels: documentation, query, community

#7129 - build(deps): bump k8s.io/apimachinery from 0.30.0 to 0.30.2

Pull Request - State: open - Opened by dependabot[bot] 16 days ago
Labels: kubernetes, dependencies, go

#7128 - test gh action 2.1.0

Pull Request - State: closed - Opened by gabriel-cx 16 days ago - 2 comments

#7127 - update(ghaction): update kics-gh-action.yaml

Pull Request - State: closed - Opened by gabriel-cx 16 days ago - 1 comment

#7126 - test gh action v2.1.0

Pull Request - State: closed - Opened by gabriel-cx 16 days ago - 2 comments

#7125 - feat(Accuracy Benchmark): update the KICS Accuracy Benchmark results for v2.x

Issue - State: open - Opened by rphipps75 16 days ago - 1 comment
Labels: feature request, community

#7124 - fix(dockerfiles): update dockerfiles constant mapping

Pull Request - State: closed - Opened by cxMiguelSilva 16 days ago - 1 comment
Labels: docker

#7123 - docs(kicsbot): preparing for release 2.1.0

Pull Request - State: closed - Opened by kicsbot 16 days ago - 1 comment
Labels: documentation, community

#7122 - feat(query): add new query for tencentcloud CVM resource

Pull Request - State: closed - Opened by SevenEarth 17 days ago - 6 comments
Labels: feature request, query, community

#7121 - ci(deps): bump chainguard/git from `9dc48ca` to `7b82024`

Pull Request - State: open - Opened by dependabot[bot] 17 days ago
Labels: docker, dependencies

#7120 - fix(dockerfile): update chainguard image

Pull Request - State: closed - Opened by ArturRibeiro-CX 17 days ago - 1 comment

#7119 - update(codeowners): update CODEOWNERS

Pull Request - State: closed - Opened by gabriel-cx 17 days ago - 1 comment

#7118 - ci(deps): bump chainguard/git from `fa7a03c` to `9dc48ca`

Pull Request - State: closed - Opened by dependabot[bot] 17 days ago - 2 comments
Labels: docker, dependencies

#7117 - fix(query): revert changes in the 'platform_flag_with_from' query

Pull Request - State: closed - Opened by JulioSCX 17 days ago - 1 comment
Labels: query

#7115 - ci(deps): bump chainguard/go from `38db527` to `3315897`

Pull Request - State: closed - Opened by dependabot[bot] 18 days ago
Labels: docker, dependencies

#7111 - build(deps): bump k8s.io/apimachinery from 0.30.0 to 0.30.1

Pull Request - State: closed - Opened by dependabot[bot] 23 days ago - 1 comment
Labels: kubernetes, dependencies, go

#7098 - fix(query): security groups not used query with false positive in aws_elasticache_instance resources

Pull Request - State: open - Opened by ArturRibeiro-CX 28 days ago - 1 comment
Labels: query, aws

#7097 - fix(query): policy without principal query with false positive for IAM role used as an inline policy

Pull Request - State: open - Opened by ArturRibeiro-CX 28 days ago - 1 comment
Labels: query, aws

#7096 - ci(deps): bump thollander/actions-comment-pull-request from b07c7f86be67002023e6cb13f57df3f21cdd3411 to bc14ce351a6a25022a490f2be0570c700083a7fe

Pull Request - State: open - Opened by dependabot[bot] 29 days ago
Labels: dependencies, github_actions

#7095 - ci(deps): bump actions/upload-artifact from 3 to 4

Pull Request - State: open - Opened by dependabot[bot] 29 days ago
Labels: dependencies, github_actions

#7094 - ci(deps): bump actions/cache from 3 to 4

Pull Request - State: open - Opened by dependabot[bot] 29 days ago
Labels: bug, dependencies, github_actions, azure

#7091 - bug(terraform): policy without principal false positive

Issue - State: open - Opened by tculp about 1 month ago - 3 comments
Labels: bug, query, docker, terraform, community, aws, appsec

#7089 - bug(terraform): wrong detection of unused security group

Issue - State: open - Opened by tculp about 1 month ago - 3 comments
Labels: bug, query, docker, terraform, community, aws, appsec

#7061 - update(query): removing special chars from query name

Pull Request - State: closed - Opened by gabriel-cx about 1 month ago - 1 comment
Labels: query

#7060 - fix(query): apt-get Missing '-y' To Avoid Manual Input

Pull Request - State: open - Opened by ArturRibeiro-CX about 1 month ago - 1 comment
Labels: query

#7059 - ci(deps): bump chainguard/go from `6011c17` to `9bb4a05`

Pull Request - State: open - Opened by dependabot[bot] about 1 month ago - 1 comment
Labels: docker, dependencies

#7058 - ci(deps): bump chainguard/git from `8332cf3` to `41ca20d`

Pull Request - State: open - Opened by dependabot[bot] about 1 month ago
Labels: docker, dependencies

#7057 - fix(query): implicit flow in oauth2 queries duplicated

Pull Request - State: closed - Opened by ArturRibeiro-CX about 1 month ago - 1 comment
Labels: query

#7056 - ci(deps): bump chainguard/git from `de87d06` to `c4ca049`

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago - 2 comments
Labels: docker, dependencies

#7055 - ci(deps): bump chainguard/go from `4d51574` to `6011c17`

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago
Labels: docker, dependencies

#7054 - query<Kubernetes>: kics-scan ignore-block not working for YAML files

Issue - State: open - Opened by apurvakg about 1 month ago - 1 comment
Labels: query, kubernetes, community

#7053 - bug(dockerfile): apt-get Missing '-y' To Avoid Manual Input`

Issue - State: open - Opened by SpikePy about 2 months ago - 1 comment
Labels: bug, query, docker, community, dockerfile, appsec

#7052 - fix(query): fix bugs and small improvements to TF queries

Pull Request - State: closed - Opened by ArturRibeiro-CX about 2 months ago - 1 comment
Labels: bug, query, terraform

#7051 - fix(query): tf mfa delete doing checks out of its scope

Pull Request - State: open - Opened by JulioSCX about 2 months ago - 1 comment
Labels: query, terraform

#7050 - ci(deps): bump styfle/cancel-workflow-action from 0.11.0 to 0.12.1

Pull Request - State: open - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, github_actions

#7049 - ci(deps): bump peter-evans/repository-dispatch from 2 to 3

Pull Request - State: open - Opened by dependabot[bot] about 2 months ago
Labels: dependencies, github_actions

#7048 - ci(deps): bump docker/setup-buildx-action from 2 to 3

Pull Request - State: open - Opened by dependabot[bot] about 2 months ago
Labels: kubernetes, docker, dependencies, github_actions

#7047 - update(docs): test codeowners

Pull Request - State: closed - Opened by gabriel-cx about 2 months ago - 1 comment

#7046 - update(repo): create CODEOWNERS

Pull Request - State: closed - Opened by gabriel-cx about 2 months ago - 1 comment

#7045 - fix(goversion): update go version from 1.22.2 to 1.22.3

Pull Request - State: closed - Opened by ArturRibeiro-CX about 2 months ago - 1 comment

#7044 - update(tests): e2e test to scan all platforms

Pull Request - State: open - Opened by asofsilva about 2 months ago - 2 comments

#7043 - feat(engine): add --max-resolver-depth flag

Pull Request - State: closed - Opened by cx-ruiaraujo about 2 months ago - 1 comment
Labels: feature, ansible

#7042 - fix(gopkg): update package path for v2

Pull Request - State: closed - Opened by cxMiguelSilva about 2 months ago - 1 comment

#7041 - docs(queries): update queries catalog

Pull Request - State: closed - Opened by kicsbot about 2 months ago - 1 comment
Labels: documentation, query, community

#7040 - test ghaction v2.0.1

Pull Request - State: closed - Opened by gabriel-cx about 2 months ago - 2 comments

#7039 - docs(kicsbot): preparing for release 2.0.1

Pull Request - State: closed - Opened by kicsbot about 2 months ago - 1 comment
Labels: documentation

#7038 - fix(kics): fix resolver issues when ansible files include each other

Pull Request - State: closed - Opened by cx-ruiaraujo about 2 months ago - 1 comment
Labels: ansible

#7037 - fix(query): fix rwd arm query

Pull Request - State: closed - Opened by JulioSCX about 2 months ago - 1 comment
Labels: query, arm

#7036 - docs(queries): update queries catalog

Pull Request - State: closed - Opened by kicsbot about 2 months ago - 1 comment
Labels: documentation, query

#7035 - fix(query): slight refactor to actually filter the correct/wanted codes

Pull Request - State: closed - Opened by EduardoSemanas about 2 months ago - 1 comment
Labels: query

#7034 - fix(query): fix query Bind Address Not Properly Set

Pull Request - State: closed - Opened by JoaoCxMartins about 2 months ago - 1 comment
Labels: query

#7033 - fix(query): fixed network access too permissive query and tests

Pull Request - State: closed - Opened by ArturRibeiro-CX about 2 months ago - 1 comment
Labels: query, kubernetes, arm

#7032 - ci(deps): bump chainguard/go from `a06a462` to `4d51574`

Pull Request - State: closed - Opened by dependabot[bot] about 2 months ago - 1 comment
Labels: docker, dependencies

#7031 - fix(dockerfile): remove user root and add platform

Pull Request - State: closed - Opened by cx-ruiaraujo 2 months ago - 1 comment
Labels: dockerfile

#7030 - fix(query): added missing case to storage blob query

Pull Request - State: closed - Opened by JulioSCX 2 months ago - 1 comment
Labels: query

#7029 - bug(core): security issue: CVE-2024-3817 found

Issue - State: closed - Opened by nvuillam 2 months ago - 4 comments
Labels: bug, docker, community

#7028 - ci(deps): bump chainguard/git from `f20defb` to `161961e`

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago - 1 comment
Labels: docker, dependencies

#7027 - fix(query): removed redundant import

Pull Request - State: closed - Opened by frasan15 2 months ago
Labels: query, community

#7026 - fix(dockerfile): add platform and remove root

Pull Request - State: closed - Opened by cx-ruiaraujo 2 months ago - 1 comment
Labels: dockerfile

#7025 - fix(query): fixed arm files getting parsed as kubernetes

Pull Request - State: closed - Opened by JulioSCX 2 months ago - 2 comments
Labels: query, kubernetes, arm

#7024 - fix(query): fix typo on storage blob service container query description

Pull Request - State: closed - Opened by ArturRibeiro-CX 2 months ago - 1 comment
Labels: query

#7023 - bug(aws): false positive on Hardcoded AWS Access Key In Lambda, (2564172f-c92b-4261-9acd-464aed511696)

Issue - State: open - Opened by pepdekpd 2 months ago - 3 comments
Labels: bug, query, cloudformation, community, aws, appsec

#7022 - ci(deps): bump chainguard/go from `a06a462` to `159e1bc`

Pull Request - State: closed - Opened by dependabot[bot] 2 months ago - 1 comment
Labels: docker, dependencies

#7021 - docs(queries): update queries catalog

Pull Request - State: closed - Opened by kicsbot 2 months ago - 1 comment
Labels: documentation, query

#7020 - bug(openapi): false positive - wrongly required `items` for string type

Issue - State: open - Opened by UncleGoogle 2 months ago - 2 comments
Labels: bug, query, community, openapi, appsec

#7019 - bug(openapi): operationScheme tags shown as missing required fields

Issue - State: open - Opened by UncleGoogle 2 months ago
Labels: bug, terraform, community, openapi

#7018 - build(deps): bump github.com/zclconf/go-cty from 1.13.1 to 1.14.4

Pull Request - State: open - Opened by dependabot[bot] 2 months ago - 1 comment
Labels: bug, dependencies, go