bridgecrewio/checkov issues and pull requests

#6245 - feat(arm): MSSQLServerMinTLSVersion

Pull Request - State: closed - Opened by chaniglik 7 months ago

#6244 - feat(arm): ARM FunctionAppHttpVersionLatest policy

Pull Request - State: closed - Opened by RachelBorzi 7 months ago - 1 comment

#6242 - feat(ARM): check - AppServiceDisallowCors

Pull Request - State: closed - Opened by RachelBorzi 7 months ago

#6240 - Checkov Policy for AWS Cognito

Issue - State: open - Opened by rlison47 7 months ago - 3 comments
Labels: best practices

#6239 - feat(terraform): Add more hype policies

Pull Request - State: closed - Opened by tsmithv11 7 months ago

#6238 - chore(deps): bump tqdm from 4.66.1 to 4.66.3

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 2 comments
Labels: dependencies, python

#6237 - CKV_AWS_94 should be updated to allow KMS mode: 'SSE-KMS-WITH-SERVICE-ROLE'

Issue - State: open - Opened by robotparty 7 months ago - 1 comment
Labels: checks

#6236 - feat(ARM):myChanges

Pull Request - State: open - Opened by SaraWeinberg1234 7 months ago

#6235 - fix(general): tolerate ${HTTPS_PROXY} without a scheme

Pull Request - State: open - Opened by andrew-rowson-lseg 7 months ago

#6234 - Error parsing Bicep conditionals

Issue - State: open - Opened by karpikpl 7 months ago
Labels: languages

#6233 - chore(general): run bump version after all integrations tests

Pull Request - State: closed - Opened by achiar99 7 months ago

#6232 - fix(sca): remove old test for the depracated workflow github-action

Pull Request - State: closed - Opened by itai1357 7 months ago

#6231 - docs(general): Update README links for PyPi

Pull Request - State: closed - Opened by KPCOFGS 7 months ago - 2 comments

#6230 - chore(sca): When trying to load policies, continue if it's custom

Pull Request - State: open - Opened by MaryArmaly 7 months ago

#6229 - fix(general): add print to random test

Pull Request - State: closed - Opened by achiar99 7 months ago

#6228 - feat(ARM):FunctionAppsEnableAuthentication

Pull Request - State: open - Opened by rutiNalenger 7 months ago

#6227 - fix(general): fix integration test in build

Pull Request - State: closed - Opened by achiar99 7 months ago

#6226 - feat(arm): add FunctionAppDisallowCORS - password correctness check

Pull Request - State: open - Opened by unu87 7 months ago

#6225 - platform(ansible): add create_definitions function for ansible framework

Pull Request - State: closed - Opened by Eliran-Turgeman 7 months ago

#6224 - fix(terraform): Update CKV_AWS_31 for RBAC

Pull Request - State: closed - Opened by tsmithv11 7 months ago

#6223 - Terraform plan scan is hanging from v3.2.65 onwards

Issue - State: open - Opened by nbowes24 7 months ago - 5 comments
Labels: crash

#6222 - feat(general): internal event notifier for catching errors on our environment

Pull Request - State: open - Opened by SteveVaknin 7 months ago - 1 comment
Labels: stale

#6221 - chore(azure): updating arm StorageAccountMinimumTlsVersion ckv_id to CKV_AZURE_44

Pull Request - State: closed - Opened by OfekShimko 7 months ago

#6220 - feat(sast): Filter js files generate by ts

Pull Request - State: closed - Opened by achiar99 7 months ago

#6219 - chore(deps): bump github/codeql-action from 3.23.0 to 3.25.3

Pull Request - State: open - Opened by dependabot[bot] 7 months ago
Labels: dependencies, github_actions

#6218 - chore(deps): bump peter-evans/create-pull-request from 5.0.2 to 6.0.5

Pull Request - State: open - Opened by dependabot[bot] 7 months ago
Labels: dependencies, github_actions

#6217 - feat(terraform): Update CloudArmorWAFACLCVE202144228.py

Pull Request - State: closed - Opened by naveednawazkhan 7 months ago

#6216 - Skiping CKV2_GHA_1 is not honoured

Issue - State: open - Opened by AttilaT 7 months ago - 8 comments
Labels: skips, contribution requested

#6215 - fix(terraform): Fix false Positive finding for CKV_GCP_73

Pull Request - State: closed - Opened by 1azunna 7 months ago - 1 comment

#6214 - CKV_GCP_73 False positive finding

Issue - State: closed - Opened by 1azunna 7 months ago - 3 comments
Labels: checks

#6213 - feat(terraform): add check for tf module versioned tag

Pull Request - State: closed - Opened by mikeurbanski1 7 months ago - 1 comment

#6212 - feat(terraform): allow module source refs that look like version tags

Pull Request - State: closed - Opened by mikeurbanski1 7 months ago

#6211 - checkov fail for azurerm_subnet_network_security_group_association

Issue - State: open - Opened by rajagopalan-trimble 7 months ago
Labels: checks

#6210 - Adding common K8s kind/object widely used by the organization ( Apart from K8s default kind/object )

Issue - State: open - Opened by karthickmuthuraj 7 months ago
Labels: best practices

#6209 - Documentation / contributing guide: Where are the Secret Scanning signatures/regex stored?

Issue - State: open - Opened by rybal06 7 months ago
Labels: checks

#6208 - in-toto Attestation Framework Output

Issue - State: open - Opened by Forrin 7 months ago - 2 comments
Labels: enhancement, outputs, contribution requested

#6207 - fix(general): fix integration tests

Pull Request - State: closed - Opened by achiar99 7 months ago

#6206 - run time increased drastically for secrets scanning in 3.2.65+

Issue - State: closed - Opened by tberreis 7 months ago - 2 comments
Labels: noise

#6205 - feat(secrets): bump bc-detect-secrets 1.5.9

Pull Request - State: closed - Opened by anatolii-paloaltonetworks 7 months ago

#6204 - Checkov scanning Terraform plan needs to be updated.

Issue - State: open - Opened by junhu73 7 months ago - 2 comments
Labels: checks

#6203 - feat(terraform): Add resource attributes to jsonify

Pull Request - State: closed - Opened by tsmithv11 7 months ago

#6202 - fix(terraform): Fix CKV_AWS_358 to handle plan files

Pull Request - State: closed - Opened by tsmithv11 7 months ago

#6201 - chore(deps): bump formidable and express in /tests/sca_package_2/examples

Pull Request - State: open - Opened by dependabot[bot] 7 months ago - 1 comment
Labels: dependencies, stale, javascript

#6200 - docs(general): Remove Python 3.7

Pull Request - State: closed - Opened by tsmithv11 7 months ago

#6199 - False positive on CKV_AWS_304: When using scheduled expressions for secrets rotation

Issue - State: open - Opened by cbowlby-bt 7 months ago - 1 comment
Labels: checks

#6198 - Checkov list severity in GitHub

Issue - State: open - Opened by JoaoLeao7 7 months ago - 1 comment
Labels: integrations

#6197 - chore(deps): bump github/codeql-action from 3.23.0 to 3.25.1

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 1 comment
Labels: dependencies, github_actions

#6196 - chore(deps): bump peter-evans/create-pull-request from 5.0.2 to 6.0.4

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago - 1 comment
Labels: dependencies, github_actions

#6195 - feat(terraform): support provider in tf_plan graph

Pull Request - State: closed - Opened by SteveVaknin 7 months ago

#6194 - feat(sast): Add 10 TS CDK

Pull Request - State: closed - Opened by matansha 7 months ago

#6193 - feat(sast): add typescript

Pull Request - State: closed - Opened by RabeaZr 7 months ago - 3 comments

#6192 - feat(general): Update range includes to handle lists of ranges and lists of values

Pull Request - State: closed - Opened by tsmithv11 7 months ago

#6191 - feat(bicep): Add bicep version of policy

Pull Request - State: closed - Opened by tsmithv11 7 months ago

#6190 - Azure Kubernetes Services - If "Planned Maintenance" is used, window duration should be equal or greater than four hours

Issue - State: open - Opened by tdefise 7 months ago
Labels: checks

#6189 - feat(terraform): add CKV_AZURE_244 to Ensure Azure Kubernetes Cluster (AKS) doesn't have a MaxSurge superior to 33% if not equal to 'Default'

Pull Request - State: open - Opened by tdefise 7 months ago - 1 comment

#6188 - feat(terraform): Ensure dedicated data endpoints are enabled

Pull Request - State: closed - Opened by tdefise 7 months ago

#6187 - Azure Container Registry - Dedicated data endpoint should be enabled

Issue - State: closed - Opened by tdefise 7 months ago
Labels: checks

#6186 - feat(sast): TypeScript cdk policies p7

Pull Request - State: closed - Opened by omryMen 7 months ago

#6185 - feat(terraform): Ensure App configuration has at least one replica configured

Pull Request - State: open - Opened by tdefise 7 months ago - 1 comment

#6184 - [CKV_SECRET_6] Only report some violations when run on a formatted JSON plan

Issue - State: open - Opened by AliSoftware 7 months ago - 5 comments
Labels: checks

#6183 - fix(sast): fix skipped_checks paths before upload to the platform

Pull Request - State: closed - Opened by YaaraVerner 7 months ago

#6182 - feat(sca): using the new api license/get-licenses-violations instead of packages/get-licenses-violations (which is deprecated)

Pull Request - State: open - Opened by itai1357 7 months ago

#6181 - feat(sca): using the new api license/get-licenses-violations instead of packages/get-licenses-violations (which is deprecated)

Pull Request - State: closed - Opened by itai1357 7 months ago

#6180 - False positive on CKV2_AWS_28: "Ensure public facing ALB are protected by WAF"

Issue - State: open - Opened by rutomo-humi 7 months ago
Labels: checks

#6179 - feat(sast): Add 5 cdk for TS

Pull Request - State: closed - Opened by matansha 7 months ago

#6178 - feat(sast): adding extended code block

Pull Request - State: closed - Opened by pazbechor 7 months ago

#6177 - feat(terraform): Add GCP policy

Pull Request - State: closed - Opened by tsmithv11 7 months ago

#6176 - fix(sca): Revert "feat(sca): using the new api license/get-licenses-violations …

Pull Request - State: closed - Opened by itai1357 7 months ago

#6175 - feat(terraform): Ensure RBAC for Azure Key Vault is enabled

Pull Request - State: open - Opened by tdefise 7 months ago - 1 comment

#6174 - feat(sca): using the new api license/get-licenses-violations instead of packages/get-licenses-violations (which is deprecated)

Pull Request - State: closed - Opened by itai1357 7 months ago

#6173 - feat(sca): support licenses custom policies enforcement rules

Pull Request - State: closed - Opened by OfekShimko 7 months ago

#6172 - False positive in CKV_OPENAPI_3: "Ensure that security schemes don't allow cleartext credentials over unencrypted channel - version 3.x.y files"

Issue - State: open - Opened by ioggstream 7 months ago
Labels: checks

#6145 - fix(terraform_plan): Edges not created because of indexing in resource["address"] when resources in modules use count

Pull Request - State: closed - Opened by sourava01 8 months ago - 3 comments

#6144 - fix(terraform): Added applicable resources for CKV_AZURE_72

Pull Request - State: closed - Opened by tdefise 8 months ago - 5 comments

GitHub / bridgecrewio/checkov issues and pull requests