fix(mise): update tool pipx:checkov ( 3.2.513 ➔ 3.2.521 )

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pipx:checkov	3.2.513 → 3.2.521

---

Release Notes

bridgecrewio/checkov (pipx:checkov)

v3.2.521

Compare Source

Bug Fix

• general: make version cache init lazy - #​7509
• secrets: report all multiline regex matches per file, not just first occurrence - #​7483

v3.2.520

v3.2.519

Bug Fix

• terraform: add aws:VpceAccount to recognized condition keys in check CKV_AWS_70 - #​7514
• terraform: Fix crash in GoogleKMSKeyIsPublic in membership check for unhashable types - #​7440

v3.2.518

v3.2.517

Bug Fix

• general: add domain allowlist validation for Prisma Cloud and Bridgecrew API URLs - #​7496
• terraform: Harden tar and zip extraction - #​7497

v3.2.516

v3.2.515

v3.2.514

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • "every weekend,on Friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.