bridgecrewio/checkov issues and pull requests

#6849 - fix(secrets): skip empty match

Pull Request - State: open - Opened by omryMen 7 days ago

#6848 - feat(secrets): Masking secrets files

Pull Request - State: closed - Opened by matansha 7 days ago

#6847 - feat(helm): Made helm + kustomize use the Kubernetes graph registry

Pull Request - State: closed - Opened by bo156 8 days ago

#6846 - fix(secrets): add prerun support for singleline

Pull Request - State: closed - Opened by RabeaZr 8 days ago

#6845 - race condition if scanning multiple kustomization overlays with unknown base

Issue - State: open - Opened by tylergmuir 9 days ago
Labels: crash

#6844 - CKV2_AZURE_21 doesn't actually add StorageBlobLogs to the Log Analytics workspace

Issue - State: open - Opened by jarmbruster74 9 days ago
Labels: checks

#6843 - feat(terraform): support resource_type attribute - revert

Pull Request - State: closed - Opened by SteveVaknin 10 days ago

#6842 - feat(secrets): Adding check_id to EnrichedSecret class

Pull Request - State: closed - Opened by pazbechor 11 days ago - 1 comment

#6841 - Version 3.2.256 introduces some errors while scanning Terraform s3 module

Issue - State: open - Opened by sleepwithcoffee 11 days ago
Labels: crash

#6840 - chore(general): bump detect-secrets

Pull Request - State: open - Opened by tsmithv11 11 days ago

#6839 - ckv_aws_60 incorrectly flags '*' Principal despite restrictive conditions

Issue - State: closed - Opened by pingoleon108 11 days ago
Labels: checks

#6838 - fix(general): fixed mypy issue

Pull Request - State: closed - Opened by bo156 11 days ago

#6837 - CKV_AWS_339 : Missing Kubernetes version 1.31

Issue - State: closed - Opened by trallnag 11 days ago - 1 comment
Labels: checks

#6836 - fix(terraform): CKV_AWS_339 add Kubernetes 1.31 to AWS EKS version ch…

Pull Request - State: closed - Opened by trallnag 11 days ago - 2 comments

#6835 - feat(cloudformation): Support Fn::Sub in cases of using a pseudo parameter

Pull Request - State: closed - Opened by bo156 11 days ago

#6834 - feat(sca): support java full dependency tree scan

Pull Request - State: open - Opened by OfekShimko 12 days ago

#6833 - fix(sast): filter unsupported policies

Pull Request - State: closed - Opened by matansha 12 days ago

#6832 - chore(general): Fix dependencies

Pull Request - State: closed - Opened by Saarett 12 days ago

#6831 - fix(general): add explicit exceptiongroup dependency

Pull Request - State: closed - Opened by MrTomerLevi 12 days ago

#6830 - feat(terraform): support resource_type attribute

Pull Request - State: closed - Opened by SteveVaknin 13 days ago

#6829 - fix(general): remove urlib from Pipfile

Pull Request - State: closed - Opened by MrTomerLevi 13 days ago

#6828 - fix(dockerfile): Handle heredoc

Pull Request - State: closed - Opened by tsmithv11 13 days ago

#6827 - chore(general): Modify README and update detect-secrets

Pull Request - State: closed - Opened by tsmithv11 13 days ago

#6826 - fix(terraform): Update EKS supported versions

Pull Request - State: open - Opened by zvickery 13 days ago

#6825 - fix(terraform): Always use a timeout when running hcl2.load to avoid being stuck when parsing error occurs

Pull Request - State: closed - Opened by bo156 13 days ago

#6824 - fix(arm): fix ARM graph block types

Pull Request - State: closed - Opened by omriyoffe-panw 14 days ago

#6823 - chore(general): bump github/codeql-action from 3.25.13 to 3.27.1

Pull Request - State: open - Opened by dependabot[bot] 14 days ago
Labels: dependencies, github_actions

#6822 - fix(secrets): fix empty diff scan

Pull Request - State: closed - Opened by omryMen 14 days ago

#6821 - feat(secrets): Add npm detector

Pull Request - State: closed - Opened by matansha 14 days ago

#6820 - chore(secrets): bump detect secrets

Pull Request - State: closed - Opened by omryMen 14 days ago

#6819 - fix(graph): fix internal checks loading when adding custom policies in cli

Pull Request - State: closed - Opened by inbalavital 14 days ago

#6818 - chore(secrets): bump detect secrets

Pull Request - State: closed - Opened by omryMen 15 days ago

#6817 - chore(secrets): bump detect secrets

Pull Request - State: closed - Opened by achiar99 15 days ago

#6816 - chore(secrets): Bump detect-secrets

Pull Request - State: closed - Opened by tsmithv11 16 days ago

#6815 - Skipping Issue: Local Module --repo-root-for-plan-enrichment .

Issue - State: open - Opened by SuperP4rks 16 days ago
Labels: skips

#6814 - fix(arm): finish variable rendering and use definitions context

Pull Request - State: closed - Opened by omriyoffe-panw 18 days ago

#6813 - fix: Allow specifying files in a github actions config file

Pull Request - State: open - Opened by m-wynn 19 days ago - 1 comment

#6812 - docs(general): Update Python versions and add env vars to the docs

Pull Request - State: closed - Opened by tsmithv11 19 days ago

#6811 - fix(arm): add middleware function for platform integration for Arm definitions

Pull Request - State: closed - Opened by omriyoffe-panw 20 days ago

#6810 - fix(secrets): Update CKV_SECRET_4 to duplication list GENERIC_PRIVATE_KEY

Pull Request - State: closed - Opened by eshmayovitz 20 days ago

#6809 - fix: Update CKV_SECRET_4 to list GENERIC_PRIVATE_KEY_CHECK_IDS

Pull Request - State: closed - Opened by eshmayovitz 21 days ago - 1 comment

#6808 - fix(arm): Align arm definitions function arguments

Pull Request - State: closed - Opened by omriyoffe-panw 21 days ago

#6807 - fix(terraform): Add opensearch to CKV2_AWS_5

Pull Request - State: closed - Opened by tsmithv11 24 days ago

#6805 - Feature Request / Bug / Integration Issue - checkov environmental variables / feature flags

Issue - State: open - Opened by timothyclarke 25 days ago - 3 comments
Labels: contribution requested

#6804 - Support attribute paths with dots in custom policies (YAML custom policies)

Issue - State: open - Opened by mbukh 25 days ago - 3 comments
Labels: integrations

#6803 - fix(general): pipenv==2024.0.3

Pull Request - State: closed - Opened by lirshindalman 25 days ago

#6802 - fix(secrets): omit all secrets value in line

Pull Request - State: closed - Opened by achiar99 26 days ago

#6801 - feat(arm): Add arm definition context

Pull Request - State: closed - Opened by lirshindalman 27 days ago

#6800 - feat(arm): python 3.12 unit test check

Pull Request - State: closed - Opened by omriyoffe-panw 27 days ago

#6799 - chore(general): bump actions/checkout from 4.1.1 to 4.2.2

Pull Request - State: open - Opened by dependabot[bot] 28 days ago
Labels: dependencies, github_actions

#6798 - chore(deps): bump actions/setup-node from 4.0.1 to 4.1.0

Pull Request - State: open - Opened by dependabot[bot] 28 days ago
Labels: dependencies, github_actions

#6797 - chore(deps): bump github/codeql-action from 3.25.13 to 3.27.0

Pull Request - State: closed - Opened by dependabot[bot] 28 days ago - 1 comment
Labels: dependencies, github_actions

#6796 - feat(general): remove specific botocore version

Pull Request - State: closed - Opened by MrTomerLevi 29 days ago

#6795 - chore(bicep): Bump Pycep

Pull Request - State: closed - Opened by tsmithv11 30 days ago - 1 comment

#6794 - fix(cloudformation): change parse log level

Pull Request - State: closed - Opened by tsmithv11 30 days ago

#6793 - wip fix(terraform): evaluate inline checks for looped modules

Pull Request - State: open - Opened by Alex-Waring about 1 month ago - 2 comments

#6792 - fix(terraform): correctly evaluate CKV_AWS_37 when there's a dynamic …

Pull Request - State: open - Opened by Alex-Waring about 1 month ago - 2 comments

#6791 - docs(general): update urls in Dockerfile configuration scanning

Pull Request - State: open - Opened by tyutyutyu about 1 month ago

#6790 - fix(secrets): add detector for IbmCosHmac

Pull Request - State: closed - Opened by RabeaZr about 1 month ago

#6789 - feat(arm): Test empty pr

Pull Request - State: closed - Opened by lirshindalman about 1 month ago

#6788 - feat(arm): add variable and parameters edges and rendering #6787

Pull Request - State: closed - Opened by pazbechor about 1 month ago

#6787 - feat(arm): add variable and parameters edges and rendering

Pull Request - State: closed - Opened by lirshindalman about 1 month ago

#6786 - feat(sca): add enableDotnetCpm env var to sca scan request

Pull Request - State: open - Opened by OfekShimko about 1 month ago

#6785 - chore(deps): bump github/codeql-action from 3.25.13 to 3.26.13

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago - 1 comment
Labels: dependencies, github_actions

#6784 - feat(terraform_plan): Support after_unknown evaluation of complex attributes

Pull Request - State: closed - Opened by bo156 about 1 month ago

#6783 - fix(terraform): Fix crash when version isn't a float

Pull Request - State: closed - Opened by tsmithv11 about 1 month ago

#6782 - ` !GetAtt` from CFN YAML isn't handled gracefully

Issue - State: closed - Opened by kisst about 1 month ago
Labels: noise

#6781 - Bicep Parsing Error: Iterative loops cannot be parsed

Issue - State: closed - Opened by dupuyjs about 1 month ago - 2 comments
Labels: languages

#6780 - fix(terraform): Security group attached to aws_mskconnect_connector is not recognized

Pull Request - State: closed - Opened by uroshercog about 1 month ago

#6779 - Security group attached to aws_mskconnect_connector is not recognized

Issue - State: closed - Opened by uroshercog about 1 month ago - 1 comment
Labels: checks

#6778 - Severity Level in Checkov report

Issue - State: closed - Opened by vivaro246 about 1 month ago - 2 comments
Labels: outputs

#6777 - Only scan changed files

Issue - State: closed - Opened by lukelloydagi about 1 month ago - 3 comments
Labels: skips

#6776 - chore(secrets): update detect secrets to 1.5.17

Pull Request - State: closed - Opened by omryMen about 1 month ago

#6775 - feat(arm): unsupported module soft fail

Pull Request - State: closed - Opened by AdamDev about 1 month ago

#6774 - Excessive Docker Image Size when Installing Checkov and Python3-pip

Issue - State: open - Opened by yilas about 1 month ago
Labels: contribution requested

#6773 - chore(deps): bump github/codeql-action from 3.25.13 to 3.26.12

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago - 1 comment
Labels: dependencies, github_actions

#6772 - chore(deps): bump actions/checkout from 4.1.1 to 4.2.1

Pull Request - State: closed - Opened by dependabot[bot] about 1 month ago - 1 comment
Labels: dependencies, github_actions

#6771 - Bicep: Implement User Data Types and Safe Access

Issue - State: closed - Opened by drokzi about 1 month ago - 1 comment
Labels: contribution requested

#6770 - chore(deps): bump cookie and express in /tests/sca_package_2/examples

Pull Request - State: open - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, javascript

#6769 - feat(arm): arm custom policy support

Pull Request - State: closed - Opened by omriyoffe-panw about 1 month ago

#6768 - fix(kubernetes): Handle non-sting params in command

Pull Request - State: closed - Opened by rotemavni about 1 month ago

#6767 - fix(helm): Remove helm target dir after scanning

Pull Request - State: closed - Opened by rotemavni about 1 month ago

#6766 - fix(terraform): Skip evaluating each.value expressions in try functions

Pull Request - State: open - Opened by rotemavni about 1 month ago

#6765 - CKV2_K8S_{1-5} do not check `apiGroups` of ClusterRoleBindings

Issue - State: open - Opened by m-wynn about 1 month ago - 2 comments
Labels: checks, k8s

#6764 - feat(terraform): 2 new checks

Pull Request - State: closed - Opened by tsmithv11 about 1 month ago

#6763 - feat(terraform): Add s3 data transport check

Pull Request - State: closed - Opened by tsmithv11 about 2 months ago

#6762 - Chekov hangs during scanning terraform module with syntax typo

Issue - State: open - Opened by dukhlov about 2 months ago
Labels: crash

#6761 - Nginx Ingress annotation snippet related checks are not checking the correct configuration

Issue - State: open - Opened by tepentti about 2 months ago - 1 comment
Labels: good first issue, checks

#6760 - CKV2_AWS_5 fails to identify opensearch attachment

Issue - State: closed - Opened by coilysiren about 2 months ago - 2 comments
Labels: checks

#6759 - fix(terraform): Set timeout for parsing Terraform files with hcl2.

Pull Request - State: closed - Opened by rotemavni about 2 months ago

#6758 - fix(terraform): Update CKV_AZURE_167 to correct check on retention policy

Pull Request - State: closed - Opened by paddymorgan84 about 2 months ago - 2 comments

#6757 - fix(terraform): Update CKV_AZURE_164 to correct check on trust policy

Pull Request - State: open - Opened by paddymorgan84 about 2 months ago

#6756 - fix(terraform): Update CKV_AZURE_171 to check automatic_upgrade_channel

Pull Request - State: open - Opened by paddymorgan84 about 2 months ago - 1 comment

#6755 - Add an option to either stop checkov connecting to prizmacloud API endpoint or to suppress warning when connection is no available.

Issue - State: closed - Opened by DiemanXT about 2 months ago - 5 comments
Labels: contribution requested

GitHub / bridgecrewio/checkov issues and pull requests