bridgecrewio/checkov issues and pull requests

#6659 - Added OSS Bucket Encryption Check for Alibaba Cloud

Pull Request - State: closed - Opened by simon-rb 3 months ago - 1 comment

#6658 - chore(general): empty PR - trigger build

Pull Request - State: closed - Opened by SteveVaknin 3 months ago

#6657 - feat(cloudformation): SAM Globals support with CloudFormation

Pull Request - State: closed - Opened by omriyoffe-panw 3 months ago

#6656 - fix(secrets): Revert remove dups

Pull Request - State: closed - Opened by RabeaZr 3 months ago

#6655 - fix(secrets): remove dups logic

Pull Request - State: closed - Opened by RabeaZr 3 months ago

#6654 - [CKV_AWS_148] False positive when `force_destroy = true`

Issue - State: closed - Opened by workmad3 3 months ago - 2 comments
Labels: checks

#6653 - fix(terraform): Don't pass existed resources in non_exists resource checks

Pull Request - State: closed - Opened by inbalavital 3 months ago

#6652 - fix(secrets): revert fixing duplications

Pull Request - State: closed - Opened by RabeaZr 3 months ago

#6651 - Evaluated variables not printed

Issue - State: open - Opened by sbkg0002 3 months ago
Labels: outputs

#6650 - Failed to scan helm when python venv is in the same directory

Issue - State: open - Opened by budgester 3 months ago
Labels: crash

#6649 - chore(deps): bump github/codeql-action from 3.25.13 to 3.26.0

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, github_actions

#6648 - fix(secrets): remove duplications in secrets

Pull Request - State: closed - Opened by RabeaZr 4 months ago - 1 comment

#6647 - feat: add support for awscc provider secrets check

Pull Request - State: open - Opened by quixoticmonk 4 months ago

#6646 - chore(deps): bump aiohttp from 3.9.5 to 3.10.2

Pull Request - State: open - Opened by dependabot[bot] 4 months ago
Labels: dependencies, python

#6645 - Discrepancy Between Homebrew vs pip Installations: CKV2 Checks Not Running with Homebrew

Issue - State: open - Opened by katrinajaneczko 4 months ago - 3 comments
Labels: integrations

#6644 - Secret Not Detected

Issue - State: open - Opened by nigarnajafli 4 months ago - 1 comment
Labels: checks

#6643 - test azure container

Pull Request - State: closed - Opened by yuvalshi0 4 months ago

#6642 - fix(terraform): evaluate resource with double underscore

Pull Request - State: closed - Opened by lirshindalman 4 months ago

#6641 - [unintentional supposed to be in fork]

Pull Request - State: closed - Opened by GerevSec 4 months ago

#6640 - Bicep join() function causes checkov to fail to parse entire file

Issue - State: closed - Opened by briantkatch 4 months ago - 4 comments
Labels: languages

#6639 - .checkov.yml is not ignored when --config-file <config> is used

Issue - State: open - Opened by hexagonalsquare 4 months ago - 1 comment

#6638 - feat(sast): Adding support for sast in windows

Pull Request - State: closed - Opened by pazbechor 4 months ago

#6637 - feat(terraform): Add build policy to match run policy for API Method without Auth or API

Pull Request - State: closed - Opened by tsmithv11 4 months ago

#6636 - chore(general): bump pypa/gh-action-pypi-publish from 1.8.11 to 1.9.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#6635 - chore(general): bump stefanzweifel/git-auto-commit-action from 5.0.0 to 5.0.1

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#6634 - chore(deps): bump stefanzweifel/changelog-updater-action from 1.10.0 to 1.11.0

Pull Request - State: open - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#6633 - chore(deps): bump actions/checkout from 4.1.1 to 4.1.7

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, github_actions

#6632 - chore(deps): bump github/codeql-action from 3.25.13 to 3.25.15

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, github_actions

#6631 - feat(terraform): Add run policy for RDS encryption in transit

Pull Request - State: closed - Opened by tsmithv11 4 months ago

#6630 - fix(terraform): extend CKV2_AWS_5 to include DMS Serverless (#6628)

Pull Request - State: closed - Opened by makmnr 4 months ago - 1 comment

#6629 - custom yaml policy to support yaml/json scan framework

Issue - State: open - Opened by junhu73 4 months ago - 2 comments
Labels: contribution requested

#6628 - CKV2_AWS_5: SG attached not recognized in DMS serverless

Issue - State: closed - Opened by makmnr 4 months ago - 3 comments
Labels: checks

#6627 - docs(general): Add OpenTofu

Pull Request - State: closed - Opened by tsmithv11 4 months ago

#6626 - fix(secrets): fix indentation to remove duplications

Pull Request - State: open - Opened by RabeaZr 4 months ago

#6625 - feat(arm): AzureContainerInstanceEnvVarSecureValueType

Pull Request - State: closed - Opened by pninib 4 months ago - 2 comments

#6624 - AbsSecurityGroupUnrestrictedIngress not correctly handling aws_vpc_security_group_ingress_rule terraform resource

Issue - State: open - Opened by FISHMANPET 4 months ago
Labels: checks

#6623 - fix(secrets): fix secrets duplication - Revert

Pull Request - State: closed - Opened by RabeaZr 4 months ago

#6622 - feat(general): Allow skipping multiple checks in a single line

Pull Request - State: open - Opened by shoshiGit 4 months ago - 1 comment

#6621 - feat(sast): Verify that all sast policies are parsed correctly

Pull Request - State: closed - Opened by omryMen 4 months ago

#6620 - Add basic support for fetching .json from a data document

Pull Request - State: closed - Opened by bo156 4 months ago

#6619 - fix(secrets): fix secrets duplication

Pull Request - State: closed - Opened by RabeaZr 4 months ago

#6617 - feat(arm): AzureDefenderDisabledForResManager

Pull Request - State: open - Opened by esterKoren 4 months ago

#6616 - feat(arm): NSGRuleUDPAccessRestricted

Pull Request - State: open - Opened by esterKoren 4 months ago

#6615 - chore(general): bump tj-actions/changed-files from 44.5.3 to 44.5.6

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#6614 - chore(general): bump actions/setup-python from 5.0.0 to 5.1.1

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#6613 - chore(general): bump actions/configure-pages from 4.0.0 to 5.0.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#6601 - Checkov is not scanning the both static and dynamic parameter blocks.

Issue - State: closed - Opened by rmotati 4 months ago - 2 comments
Labels: checks

#6595 - Add OpenTofu support

Issue - State: closed - Opened by JonZeolla 4 months ago - 1 comment
Labels: languages

#6594 - fix(secrets): fix secrets prerun bug

Pull Request - State: closed - Opened by achiar99 4 months ago

#6593 - False positive for CKV2_GCP_20 on GCP Cloud SQL (MySQL) replica

Issue - State: open - Opened by lucaspierru-convelio 4 months ago
Labels: checks

#6592 - fix(terraform): Exclude String in CKV_AWS_337

Pull Request - State: closed - Opened by tsmithv11 4 months ago

#6591 - feat(secrets): If the prrun regex found but we already scanned file we already scann…

Pull Request - State: closed - Opened by pazbechor 4 months ago

#6590 - feat(cloudformation): enrich cloudformation cloudsplaining inspected key line

Pull Request - State: open - Opened by maxamel 4 months ago

#6589 - chore(general): bump github/codeql-action from 3.23.0 to 3.25.13

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#6588 - fix(sast): BCE-36172 fix cdk policies

Pull Request - State: open - Opened by RabeaZr 4 months ago

#6587 - feat(general): support multiple frameworks in one custom policy

Pull Request - State: closed - Opened by taviassaf 4 months ago

#6586 - feat(secrets): Adding the option to prerun before multiline pattern executing

Pull Request - State: closed - Opened by pazbechor 4 months ago

#6585 - False positive in with apt upgrade and CKV_DOCKER_5

Issue - State: closed - Opened by jebeaudet 4 months ago - 1 comment
Labels: checks

#6584 - AzApi support

Issue - State: closed - Opened by deku1998 4 months ago - 1 comment
Labels: contribution requested

#6583 - feat(general): Add metadata exception filter to GHA

Pull Request - State: closed - Opened by tsmithv11 4 months ago

#6582 - How to exclude a particular resource from checkov custom policy

Issue - State: open - Opened by ashfaqsharif 4 months ago - 1 comment
Labels: checks

#6581 - evaluate_try errors with "Amazon EKS Blueprints Addons" Terraform module

Issue - State: open - Opened by elchenberg 4 months ago
Labels: graph

#6580 - fix(general): fix the right numbers in TestSkipJsonRegexPattern

Pull Request - State: closed - Opened by itai1357 4 months ago

#6579 - feat(general): add severity metadata to custom policy

Pull Request - State: closed - Opened by dtrouillet 4 months ago - 11 comments

#6578 - feat(arm): AKSEphemeralOSDisks

Pull Request - State: closed - Opened by shoshiGit 4 months ago

#6577 - fix(terraform): TFPlan + TF fixes for google_project_iam_policy + google_iam_policy

Pull Request - State: closed - Opened by ChanochShayner 4 months ago

#6576 - feat(terraform_plan): Update plan_parser for gcp IAM

Pull Request - State: closed - Opened by tsmithv11 4 months ago - 1 comment

#6575 - feat(arm): AKSEncryptionAtHostEnable

Pull Request - State: closed - Opened by shoshiGit 4 months ago

#6574 - fix(general): fix sca unit tests for python 3.12

Pull Request - State: closed - Opened by AdamDev 4 months ago

#6573 - fix(terraform): fix failures of no caller on definition context

Pull Request - State: closed - Opened by SteveVaknin 4 months ago

#6572 - feat(general): Refactor all resource type handling in Checkov

Pull Request - State: closed - Opened by lirshindalman 4 months ago

#6571 - AttributeError with dynamic "rule" blocks

Issue - State: open - Opened by brianlambert24 4 months ago - 1 comment
Labels: crash

#6570 - fix(terraform): Fix title of CKV_AZURE_238

Pull Request - State: closed - Opened by tsmithv11 4 months ago

#6569 - NEW CHECK/FRAMEWORK insure locking of dependencies

Issue - State: open - Opened by bakosa 4 months ago - 1 comment
Labels: best practices

#6568 - chore(deps): bump github/codeql-action from 3.23.0 to 3.25.12

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, github_actions

#6567 - False positive on CKV_DOCKER_9

Issue - State: open - Opened by jefimm 4 months ago - 3 comments
Labels: checks

#6566 - feat(cloudformation): Update audit_logs valid values

Pull Request - State: closed - Opened by arielkru 5 months ago - 1 comment

#6565 - fix(secrets): filter secrets that have vault: in them

Pull Request - State: closed - Opened by RabeaZr 5 months ago - 1 comment

#6564 - feat(general): Unified http client

Pull Request - State: open - Opened by AdamDev 5 months ago

#6559 - CKV_AZURE_43 Naming and Description Mismatch

Issue - State: open - Opened by iheanacho-chukwu 5 months ago - 5 comments
Labels: checks

#6558 - `CKV_AZURE_238` triggers false positive

Issue - State: closed - Opened by arnaud-tincelin 5 months ago - 3 comments

#6557 - fix(arm): CKV_AZURE_56 just for authsettingsV2 name

Pull Request - State: closed - Opened by ChanochShayner 5 months ago

#6556 - CKV2_ANSIBLE_2 false positive when variable is used

Issue - State: open - Opened by amedee 5 months ago
Labels: checks

#6555 - Azure CKV_AZURE_56 function app Config check for AuthsettingsV2 scans all types of function app Configs

Issue - State: closed - Opened by dj-r1 5 months ago
Labels: checks

#6554 - feat(azure): add new policies for Azure Synapse (tf and arm)

Pull Request - State: closed - Opened by taviassaf 5 months ago

#6553 - feat(azure): add new policies for Azure Synapse arm

Pull Request - State: closed - Opened by taviassaf 5 months ago - 2 comments

#6550 - chore(general): bump jpetrucciani/bandit-check from 1.7.6 to 1.7.9

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, github_actions

#6549 - chore(general): bump peter-evans/create-pull-request from 5.0.2 to 6.1.0

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, github_actions

#6548 - chore(deps): bump github/codeql-action from 3.23.0 to 3.25.11

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, github_actions

#6547 - feat(arm): AKSEncryptionAtHostEnable

Pull Request - State: closed - Opened by shoshiGit 5 months ago

#6546 - feat(arm): AKSEphemeralOSDisks

Pull Request - State: closed - Opened by shoshiGit 5 months ago

#6545 - feat(arm): add CKV_AZURE_169 to ensure that AKS use the Paid Sku for its SLA

Pull Request - State: closed - Opened by tehila86127 5 months ago

#6544 - feat(arm): add CKV_AZURE_170 to ensure that AKS use the Paid Sku for its SLA

Pull Request - State: closed - Opened by tehila86127 5 months ago

#6542 - feat(azure): add new policies for Azure Synapse - arm

Pull Request - State: open - Opened by taviassaf 5 months ago - 1 comment

#6540 - Checkov Crashes due to Python Import Errors on Ubuntu and Windows

Issue - State: closed - Opened by massimiliano96 5 months ago - 3 comments
Labels: crash

#6539 - Fails to load local module located in parent directory

Issue - State: closed - Opened by eqdominicboutin 5 months ago - 2 comments
Labels: crash

#6536 - Implementing a .checkovignore File to sets list of ruleID for Skip-Check with expiry Dates

Issue - State: open - Opened by iheanacho-chukwu 5 months ago - 5 comments
Labels: contribution requested

#6536 - Implementing a .checkovignore File to sets list of ruleID for Skip-Check with expiry Dates

Issue - State: open - Opened by iheanacho-chukwu 5 months ago - 4 comments
Labels: contribution requested

#6528 - Inconsistent check result depending on providing a value that is not related to the check subject

Issue - State: open - Opened by msl0 5 months ago
Labels: outputs

#6514 - feat(arm): NSGRuleUDPAccessRestricted

Pull Request - State: open - Opened by esterKoren 5 months ago - 1 comment

GitHub / bridgecrewio/checkov issues and pull requests