bridgecrewio/checkov issues and pull requests

#6143 - CKV_AZURE_72: Missing Function Apps, Function Apps Slots and Web App Slots

Issue - State: closed - Opened by tdefise 8 months ago - 1 comment
Labels: checks, stale

#6142 - Bicep Parsing Error: union() in resource deployment

Issue - State: closed - Opened by svwie 8 months ago - 2 comments
Labels: stale, languages

#6141 - feat(general): Update the releases' zip file names to be generic

Pull Request - State: closed - Opened by Saarett 8 months ago

#6140 - CKV2_AZURE_41 false positive?

Issue - State: open - Opened by acelebanski 8 months ago - 6 comments
Labels: checks

#6139 - Azure App Configuration Store - Ensure 'Soft Delete' is set to 7 days.

Issue - State: open - Opened by tdefise 8 months ago - 1 comment
Labels: checks, stale

#6138 - feat(terraform): Ensure App configuration has at least one replica configured

Pull Request - State: closed - Opened by tdefise 8 months ago - 1 comment

#6137 - Custom yml policy is not matching the contents of Terraform

Issue - State: open - Opened by rajagopalan-trimble 8 months ago - 1 comment
Labels: checks

#6136 - Azure App Configuration Store - Ensure an additional replica is configured in order to support regional outages

Issue - State: open - Opened by tdefise 8 months ago - 1 comment
Labels: checks, stale

#6135 - False positives when using Terraform AWS modules

Issue - State: closed - Opened by sourava01 8 months ago
Labels: graph

#6134 - feat(terraform): support s3 bucket name for references in graph

Pull Request - State: closed - Opened by SteveVaknin 8 months ago

#6133 - fix(general): remove limitation of resource and provider in tf.json file

Pull Request - State: closed - Opened by lirshindalman 8 months ago

#6132 - feat(general): add policy metadata filter exception flag

Pull Request - State: closed - Opened by kartikp10 8 months ago

#6131 - feat(github): add summary message in github_failed_only output

Pull Request - State: open - Opened by sourava01 8 months ago - 6 comments

#6130 - feat(general): Env Variable CHECKOV_DISABLE_SKIP_COMMENTS to disable inline comment skips

Pull Request - State: open - Opened by rubengm13 8 months ago - 1 comment
Labels: stale

#6129 - fix(cloudformation): Updated deprecated runtimes for CKV_AWS_363

Pull Request - State: closed - Opened by keithrozario 8 months ago - 2 comments

#6128 - fix(sca): adding optional flag for reseting the http manager

Pull Request - State: closed - Opened by itai1357 8 months ago

#6127 - chore(sast): move typescript checks with old syntax out of checks folder

Pull Request - State: closed - Opened by omryMen 8 months ago

#6126 - TypeError('Expected maxsize to be an integer or None')

Issue - State: open - Opened by SaleedherStryker 8 months ago - 3 comments
Labels: stale

#6125 - fix(general): pin the version of schema to <=0.7.5

Pull Request - State: closed - Opened by lirshindalman 8 months ago - 1 comment

#6124 - Checkov Fails with Error: ModuleNotFound: Schema

Issue - State: closed - Opened by surecloud-meason 8 months ago - 8 comments
Labels: crash

#6123 - Support for Azure SQL. Managed Instance (Custom Policy)

Issue - State: open - Opened by prr19776 8 months ago - 1 comment
Labels: checks

#6122 - CKV_AZURE_189 should take into account virtual_network_subnet_ids

Issue - State: closed - Opened by Wiston999 8 months ago
Labels: checks

#6121 - feat(terraform): add fix for when tf_def is a string

Pull Request - State: closed - Opened by maxamel 8 months ago

#6120 - feat(secrets): bump manually bc-detect-secrets

Pull Request - State: closed - Opened by maxamel 8 months ago

#6119 - feat(terraform): fix for_each resource handling

Pull Request - State: closed - Opened by maxamel 8 months ago

#6118 - chore(deps): bump github/codeql-action from 3.23.0 to 3.24.9

Pull Request - State: closed - Opened by dependabot[bot] 8 months ago - 1 comment
Labels: dependencies, github_actions

#6117 - fix(sca): Fix suppression integration crashing if licenseTypes is missing

Pull Request - State: closed - Opened by Saarett 8 months ago

#6116 - Azure SQL Server - Ensure that your Azure SQL Server supporting time critical applications are attached to a failover group

Issue - State: open - Opened by tdefise 8 months ago - 1 comment
Labels: checks, stale

#6115 - feat(terraform): Ensure the default IP Restriction action for SCM is set to "Deny"

Pull Request - State: open - Opened by tdefise 8 months ago - 2 comments

#6114 - Azure App Services - Ensure the default IP Restriction action for SCM is set to 'Deny'

Issue - State: open - Opened by tdefise 8 months ago
Labels: checks

#6113 - terraform_plan - modules - for_each / count issues

Issue - State: open - Opened by Greg05000 8 months ago - 3 comments
Labels: graph

#6112 - feat(terraform): Ensure that backups are geo-redundants for Azure SQL Databases

Pull Request - State: open - Opened by tdefise 8 months ago - 1 comment

#6111 - Azure SQL Database - Ensure that backups are geo-redundants

Issue - State: open - Opened by tdefise 8 months ago - 1 comment
Labels: checks, stale

#6110 - No colors using Azure DevOps pipelines

Issue - State: open - Opened by msl0 8 months ago - 1 comment
Labels: stale, outputs

#6109 - platform(general): Handle SAST suppressions (suppressions V2)

Pull Request - State: closed - Opened by mikeurbanski1 8 months ago

#6108 - CloudFormation: All protocols and ports open in Security Group Ingress not recognized

Issue - State: open - Opened by Andrii-moto 8 months ago - 1 comment
Labels: checks

#6107 - platform(general): handle API errors with more detail

Pull Request - State: closed - Opened by mikeurbanski1 8 months ago

#6106 - fix(terraform): Fixed bug in evaluate_conditional_expression and added zipmap support

Pull Request - State: closed - Opened by bo156 8 months ago

#6105 - fix(secrets): ignore secret check in test file

Pull Request - State: closed - Opened by YaaraVerner 8 months ago

#6104 - fix(terraform): fix false positives for CKV_GCP_49

Pull Request - State: open - Opened by saisirishreddy 8 months ago - 1 comment

#6103 - feat(terraform): Ensure the default IP Restriction action is set to "Deny"

Pull Request - State: open - Opened by tdefise 8 months ago - 2 comments

#6102 - CKV_GCP_6 outdated check

Issue - State: closed - Opened by GurayCetin 8 months ago - 3 comments
Labels: checks

#6101 - docs:typo correction for KMS policy

Pull Request - State: open - Opened by dmellonielet 9 months ago

#6100 - Azure App Services - Ensure the default IP Restriction action is set to 'Deny'

Issue - State: open - Opened by tdefise 9 months ago - 1 comment
Labels: checks, stale

#6099 - feat(terraform): Ensure basic authentication for FTP is disabled

Pull Request - State: open - Opened by tdefise 9 months ago - 1 comment

#6098 - Azure App Services - Ensure basic authentication for FTP is disabled

Issue - State: open - Opened by tdefise 9 months ago - 1 comment
Labels: checks, stale

#6097 - feat(terraform): Ensure basic authentication for SCM is disabled

Pull Request - State: open - Opened by tdefise 9 months ago - 1 comment

#6096 - Azure App Services - Ensure basic authentication for SCM is disabled

Issue - State: open - Opened by tdefise 9 months ago - 1 comment
Labels: checks, stale

#6095 - feat(sast): support sast skipped checks

Pull Request - State: closed - Opened by YaaraVerner 9 months ago

#6094 - fix(terraform): add null as allowed value, when checking for presence of public IP in CKV2_AZURE_39

Pull Request - State: closed - Opened by phoehnel 9 months ago - 3 comments

#6093 - CKV_AZURE_118 - Incorrect link to guide

Issue - State: closed - Opened by msl0 9 months ago - 3 comments
Labels: outputs

#6092 - chore(deps): bump github/codeql-action from 3.23.0 to 3.24.7

Pull Request - State: closed - Opened by dependabot[bot] 9 months ago - 1 comment
Labels: dependencies, github_actions

#6091 - chore(deps): bump peter-evans/create-pull-request from 5.0.2 to 6.0.2

Pull Request - State: closed - Opened by dependabot[bot] 9 months ago - 1 comment
Labels: dependencies, github_actions

#6090 - feat(secrets): fix entropy detector FP

Pull Request - State: closed - Opened by maxamel 9 months ago

#6089 - [ask] Can we extend checkov secret policy?

Issue - State: closed - Opened by kecebon9 9 months ago - 2 comments
Labels: languages

#6088 - fix(cloudformation): add CKV_AWS_365 to ensure all ports are not open from anywhere

Pull Request - State: open - Opened by Andrii-moto 9 months ago

#6087 - fix(terraform): prevent side effects when updating variable rendering

Pull Request - State: closed - Opened by SteveVaknin 9 months ago

#6086 - Add the schema of config YAML to `json-schema.org`

Issue - State: open - Opened by yu-iskw 9 months ago - 2 comments
Labels: stale, best practices, contribution requested

#6085 - KeyError tf_source_modules error since v3.2.34

Issue - State: closed - Opened by fatbasstard 9 months ago - 7 comments
Labels: crash

#6083 - feat(terraform): connect module resource to provider

Pull Request - State: closed - Opened by maxamel 9 months ago

#6081 - check to test the required provider versions with new terraform format of required_providers for azurerm

Issue - State: open - Opened by pravinkumarb84 9 months ago - 2 comments
Labels: good first issue, checks, stale

#6080 - feat(terraform): Add ability to define the `guideline` option for all Terraform Resource Checks

Pull Request - State: closed - Opened by cawilson 9 months ago - 3 comments

#6079 - chore: bump jpetrucciani/bandit-check from 1.7.6 to 1.7.8

Pull Request - State: open - Opened by dependabot[bot] 9 months ago
Labels: dependencies, github_actions

#6078 - fix(sast): add attribute verification

Pull Request - State: closed - Opened by omryMen 9 months ago

#6077 - Checkov Checks for AWS ALB and NLB tcp port restriction

Issue - State: open - Opened by rlison47 9 months ago - 2 comments
Labels: checks, stale

#6076 - platform(general): improve upload failure logging and log size of failed files

Pull Request - State: closed - Opened by mikeurbanski1 9 months ago

#6075 - Integration of Checkov in Harbor Container Registry for scanning Helm Charts

Issue - State: open - Opened by Indhu06 9 months ago - 2 comments
Labels: enhancement, stale, integrations, contribution requested

#6074 - Couldn't execute Custom Python Policy in Checkov

Issue - State: open - Opened by ghost 9 months ago - 1 comment
Labels: outputs

#6073 - Incorrect logic applied to security group checks when `cidr_blocks` & `self = true` are defined.

Issue - State: open - Opened by jmcmillan1873 9 months ago - 1 comment
Labels: checks, stale

#6072 - fix(terraform): Dont duplicate more vertices than needed for nested modules with large count/for each values + used cache to avoid extensive usage of os.path.realpath to drastically improve performance

Pull Request - State: closed - Opened by bo156 9 months ago

#6058 - CKV_GCP_110 test still fails after recommended change for PostrgeSQL's database_flag for pgAudit (GCP and Terrafrom)

Issue - State: closed - Opened by marcin-kulik 9 months ago - 2 comments
Labels: checks

#6057 - CKV_GCP_109, CKV_GCP_55 tests still fail after recomended changes for PostrgeSQL's database_flag for log levels (Terraform and GCP)

Issue - State: closed - Opened by marcin-kulik 9 months ago - 2 comments
Labels: checks

GitHub / bridgecrewio/checkov issues and pull requests