bridgecrewio/checkov issues and pull requests

#6041 - Release Apple Silicon packages

Issue - State: closed - Opened by florianmutter 9 months ago - 2 comments
Labels: enhancement

#6040 - fix(sast): fetch sast custom policieis

Pull Request - State: closed - Opened by achiar99 9 months ago

#6039 - fix(terraform): support vertex reference based on foreach key

Pull Request - State: closed - Opened by bo156 9 months ago

#6038 - CKV_AZURE_136: False-Positive For Read Replicas In Azure Database For PostgreSQL - Flexible Server

Issue - State: open - Opened by t1murl 9 months ago
Labels: checks

#6037 - chore: bump github/codeql-action from 3.23.0 to 3.24.3

Pull Request - State: closed - Opened by dependabot[bot] 9 months ago - 1 comment
Labels: dependencies, github_actions

#6036 - chore: bump actions/jekyll-build-pages from 1.0.9 to 1.0.12

Pull Request - State: closed - Opened by dependabot[bot] 9 months ago
Labels: dependencies, github_actions

#6035 - Checkov fails to download modules from Azure DevOps repos when run locally on Windows. 'fatal: could not create leading directories of ...'

Issue - State: open - Opened by patrcoff 9 months ago - 2 comments
Labels: stale

#6034 - fix(terraform): CKV_AWS_308 - checked if caching was enabled and only then check for encryption of cache

Pull Request - State: closed - Opened by bo156 9 months ago

#6033 - chore(general): Redeifne remove time limit

Pull Request - State: closed - Opened by GerevSec 10 months ago - 1 comment

#6032 - Checkov is not listing under security tools in github

Issue - State: open - Opened by sreejith-UA 10 months ago - 2 comments
Labels: stale, best practices

#6031 - www.bridgecrew.cloud redirects to www.prismacloud.io - unable to login to bridgecrew to check on or generate API key

Issue - State: closed - Opened by Tim-H-OC 10 months ago - 4 comments
Labels: best practices

#6030 - _

Issue - State: closed - Opened by NithishCirigidda 10 months ago - 1 comment
Labels: crash

#6029 - fix(sast): fix cdk checks path

Pull Request - State: closed - Opened by omryMen 10 months ago

#6028 - CKV_AWS_300: false-positive in case of disabled rule in dynamic block

Issue - State: open - Opened by kiss-less 10 months ago - 5 comments
Labels: checks, stale

#6027 - feat(terraform): setting namespace check for CKV_AWS_312

Pull Request - State: open - Opened by avazula 10 months ago - 6 comments

#6026 - chore: bump actions/jekyll-build-pages from 1.0.9 to 1.0.10

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies, github_actions

#6025 - chore: bump actions/setup-node from 4.0.1 to 4.0.2

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 3 comments
Labels: dependencies, github_actions

#6024 - fix(graph): remove SCA runner v1 - re-enable

Pull Request - State: closed - Opened by AdamDev 10 months ago

#6022 - feat(general): Implement authentication retry mechanism

Pull Request - State: closed - Opened by OfekShimko 10 months ago

#6021 - feat(cloudformation): add CFN policies for MSK

Pull Request - State: closed - Opened by tsmithv11 10 months ago

#6020 - fix KubernetesDashboard false positive

Pull Request - State: closed - Opened by SemProvoost 10 months ago

#6019 - fix(kubernetes): Fix false positive CKV_K8S_33

Pull Request - State: closed - Opened by SemProvoost 10 months ago - 2 comments

#6018 - chore(sca): sca scan v2 support backward code

Pull Request - State: closed - Opened by AdamDev 10 months ago

#6017 - Revert "fix(graph): remove SCA runner v1"

Pull Request - State: closed - Opened by AdamDev 10 months ago

#6016 - fix(general): downgrade botocore dependency

Pull Request - State: closed - Opened by SteveVaknin 10 months ago

#6015 - chore(sast): remove unused files

Pull Request - State: closed - Opened by omryMen 10 months ago

#6014 - Wrong report while skipping checks

Issue - State: open - Opened by tberreis 10 months ago - 7 comments
Labels: stale, skips

#6013 - feat(general): Implement authentication retry mechanism

Pull Request - State: closed - Opened by OfekShimko 10 months ago

#6012 - feat(sast): add danger rule

Pull Request - State: closed - Opened by RabeaZr 10 months ago

#6011 - Fix(general): downgrade boto3

Pull Request - State: closed - Opened by SteveVaknin 10 months ago

#6010 - fix(terraform): Deleted deprecated check CKV_GCP_19

Pull Request - State: closed - Opened by bo156 10 months ago

#6009 - fix(terraform): fix check CKV2_AZURE_10

Pull Request - State: closed - Opened by YaaraVerner 10 months ago

#6008 - CKV2_AWS_38 - Check not evaluating correctly for private hosted zone

Issue - State: open - Opened by stevec1980 10 months ago - 4 comments
Labels: checks

#6007 - CKV_AWS_312 - Incorrect check values

Issue - State: open - Opened by stevec1980 10 months ago - 4 comments
Labels: checks, stale

#6006 - chore(general): fix cdk suppressed checks

Pull Request - State: closed - Opened by achiar99 10 months ago

#6005 - fix(graph): remove SCA runner v1

Pull Request - State: closed - Opened by AdamDev 10 months ago

#6004 - test

Pull Request - State: closed - Opened by RabeaZr 10 months ago

#6003 - chore(general): Redefine adjust time-limit

Pull Request - State: closed - Opened by GerevSec 10 months ago

#6002 - CKV_SECRETS_3: Azure storage account access key triggered for GCP KMS encrypted secrets

Issue - State: closed - Opened by Daniel-I-Am 10 months ago - 9 comments
Labels: checks

#6001 - chore: bump peter-evans/create-pull-request from 5.0.2 to 6.0.0

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies, github_actions

#6000 - chore: bump github/codeql-action from 3.23.0 to 3.24.0

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies, github_actions

#5999 - just for tesT

Pull Request - State: closed - Opened by bo156 10 months ago

#5998 - feat(secrets): bump bc-detect-secrets to version 1.5.4

Pull Request - State: closed - Opened by bo156 10 months ago

#5997 - chore(sast): add option to fail silently in case of running one specific framework

Pull Request - State: closed - Opened by omryMen 10 months ago

#5996 - fix(graph): keep resource_types empty for filter blocks

Pull Request - State: closed - Opened by gruebel 10 months ago - 3 comments

#5995 - chore: Add logs into get_scan_results_from_cache_async

Pull Request - State: closed - Opened by Saarett 10 months ago

#5994 - fix(terraform): Correctly relace foreach_value inside _update_attributes for complex cases

Pull Request - State: closed - Opened by bo156 10 months ago

#5993 - fix(terraform): CKV_AWS_23 rule description fixed for clarity

Pull Request - State: closed - Opened by JamesWoolfenden 10 months ago

#5992 - chore: bump pycep-parser from 0.4.1 to 0.4.2

Pull Request - State: closed - Opened by NassereA 10 months ago - 3 comments

#5991 - Incorrectly fails CKV_AWS_23 when no rules are specified in the security group

Issue - State: closed - Opened by bgshacklett 10 months ago - 1 comment
Labels: checks

#5990 - add only the excluded_vertex to the failed list

Pull Request - State: closed - Opened by YaaraVerner 10 months ago

#5989 - feat(general): add env for dont check package update

Pull Request - State: open - Opened by isality 10 months ago - 6 comments

#5988 - feat(sca): persist support logs for sub processes

Pull Request - State: closed - Opened by AdamDev 10 months ago

#5987 - feat(sast): add dataflow to output

Pull Request - State: closed - Opened by RabeaZr 10 months ago - 1 comment

#5986 - feat(azure): create arm check StorageAccountMinimumTlsVersion CKV_AZURE_236

Pull Request - State: closed - Opened by OfekShimko 10 months ago - 2 comments

#5985 - fix(kubernetes): Update checkov-job.yaml

Pull Request - State: closed - Opened by themagiccog 10 months ago

#5984 - chore(general): fix security secrets scan

Pull Request - State: closed - Opened by achiar99 10 months ago

#5983 - chore: set sast+cdk integration tests prisma env variables

Pull Request - State: closed - Opened by tronxd 10 months ago

#5982 - chore(general): fix prisma url

Pull Request - State: closed - Opened by achiar99 10 months ago

#5981 - Achia steve test

Pull Request - State: closed - Opened by achiar99 10 months ago

#5980 - chore: bump jpetrucciani/bandit-check from 1.7.6 to 1.7.7

Pull Request - State: closed - Opened by dependabot[bot] 10 months ago - 1 comment
Labels: dependencies, github_actions

#5979 - .

Pull Request - State: closed - Opened by achiar99 10 months ago

#5978 - chore(general): replace to prisma token

Pull Request - State: closed - Opened by achiar99 10 months ago

#5977 - fix(sast): summarize errors

Pull Request - State: closed - Opened by RabeaZr 10 months ago

#5976 - chore(general): Make sure even in py 3.12 don't use pytest 8

Pull Request - State: closed - Opened by bo156 10 months ago

#5975 - (Question) Is it possible to block an entire resource?

Issue - State: closed - Opened by bschaatsbergen 10 months ago - 5 comments
Labels: checks

#5974 - fix(terraform): extend EKS version to include 1.29

Pull Request - State: closed - Opened by quixoticmonk 10 months ago - 2 comments

#5973 - CKV_AWS_339 : Extend EKS version list to include 1.29

Issue - State: open - Opened by quixoticmonk 10 months ago
Labels: checks

#5972 - SCA result: fixed version vs compliant version

Issue - State: closed - Opened by za 10 months ago - 2 comments
Labels: documentation

#5971 - fix(terraform): Manually fixed test for loading terraform registry to be with commit hash instead of version tag

Pull Request - State: closed - Opened by bo156 10 months ago

#5970 - fix(terraform): Temporarly disabled CKV2_IBM_6 as it requires a deprecated feature

Pull Request - State: open - Opened by bo156 10 months ago

#5969 - feat(azure): AzureStorageKeyDetector scan multi lines and skip public keys

Pull Request - State: open - Opened by anatolii-paloaltonetworks 10 months ago

#5968 - fix(terraform): add new deprecated runtimes

Pull Request - State: closed - Opened by JamesWoolfenden 10 months ago - 6 comments

#5967 - CKV_AWS_363 : Missing deprecated lambda runtimes

Issue - State: open - Opened by quixoticmonk 10 months ago
Labels: checks

#5966 - fix(terraform): and cdk/cloudformation: inconsistent naming of AWS resources in checks

Pull Request - State: closed - Opened by quixoticmonk 10 months ago - 1 comment

#5965 - AWS resource names inconsistent in checks.

Issue - State: closed - Opened by quixoticmonk 10 months ago - 1 comment
Labels: checks

#5964 - chore: Don't upload graph for on-prem users

Pull Request - State: closed - Opened by ChanochShayner 10 months ago

#5963 - fix(terraform): External module test

Pull Request - State: closed - Opened by Saarett 10 months ago

#5962 - test-DRAFT

Pull Request - State: closed - Opened by RabeaZr 10 months ago

#5961 - chore(general): BC sunset, change the default API Url to Prisma Cloud

Pull Request - State: closed - Opened by SteveVaknin 10 months ago

#5960 - Checkov no terraform_plan scan result for resource 'google_container_engine_versions'

Issue - State: open - Opened by rlison47 10 months ago - 9 comments
Labels: checks, stale

#5959 - fix(sast): replaced TBD with owasp and removed "sast engine"

Pull Request - State: closed - Opened by RabeaZr 10 months ago

#5958 - Issue with Check: CKV2_AZURE_31 not skipping GatewaySubnet and AzureFirewallSubnet

Issue - State: open - Opened by CGIF-cvorwald 10 months ago - 2 comments
Labels: checks, stale

#5956 - download-external-module flag fails for AWS Codecommit URLs sourced modules

Issue - State: closed - Opened by multiverseloop 11 months ago - 9 comments
Labels: stale, integrations

#5955 - feat(sast): Add policies to executable

Pull Request - State: closed - Opened by matansha 11 months ago

#5954 - platform(general): handle weaknesses rename

Pull Request - State: closed - Opened by mikeurbanski1 11 months ago

#5953 - fix(sast): change the path for taint mode match

Pull Request - State: closed - Opened by matansha 11 months ago

#5952 - Checkov to Ensure GKE clusters run on a supported Kubernetes version

Issue - State: open - Opened by rlison47 11 months ago - 17 comments
Labels: stale, best practices

#5951 - fix(sast): fix report with only reachability

Pull Request - State: closed - Opened by achiar99 11 months ago

#5950 - platform(general): Change SAST enforcement rule to weaknesses

Pull Request - State: closed - Opened by mikeurbanski1 11 months ago

#5949 - fix(sast): Fix serialize for sast report with taint mode

Pull Request - State: closed - Opened by matansha 11 months ago

#5948 - Checkov windows binary not working and not clear if any dependencies need to be there for binary to work

Issue - State: closed - Opened by cloudbackenddev 11 months ago - 2 comments
Labels: crash

#5947 - List of all checkov scans with the Severity Level

Issue - State: closed - Opened by apurvakg 11 months ago - 2 comments
Labels: checks

#5946 - chore(general): changed termcolor dep to allow 1.1.0 and beyond

Pull Request - State: closed - Opened by bo156 11 months ago

#5945 - Exception thrown on MAC when running checkov pre-commit hook 3.1.60

Issue - State: open - Opened by ocofaigh 11 months ago - 5 comments
Labels: crash

#5944 - fix(general): allow colorama version >=0.4.3,<0.5.0 in setup

Pull Request - State: closed - Opened by bo156 11 months ago

#5943 - fix(terraform): find explicit lockout fail actions for s3

Pull Request - State: closed - Opened by JamesWoolfenden 11 months ago

#5942 - chore: bump actions/deploy-pages from 4.0.2 to 4.0.3

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago
Labels: dependencies, github_actions

#5941 - chore: bump mikepenz/release-changelog-builder-action from 4.1.0 to 4.1.1

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago
Labels: dependencies, github_actions

#5940 - chore: bump github/codeql-action from 3.22.12 to 3.23.0

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago - 1 comment
Labels: dependencies, github_actions

GitHub / bridgecrewio/checkov issues and pull requests