test(deps): update dependency checkov to v3.2.130

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
checkov	3.2.124 -> 3.2.130

---

Release Notes

bridgecrewio/checkov (checkov)

v3.2.130

Feature

• arm: add CKV_AZURE_135 to ensure Application Gateway WAF prevents message lookup in Log4j2. - #​6364
• arm: add CKV_AZURE_140 to ensure that Local Authentication is disabled on CosmosDB - #​6329
• arm: add CKV_AZURE_163 Enable vulnerability scanning for container images - #​6339
• arm: add MariaDbPublicAccessDisabled convert policy to arm - #​6246
• arm: AKSLocalAdminDisabled - #​6334
• arm: AppServiceFTPSState - #​6363
• arm: AzureServiceFabricClusterProtectionLevel - #​6366
• arm: ensure ACR disables anonymous pulling of images (CKV_AZURE_138) - #​6373
• arm: KeyVaultDisablesPublicNetworkAccess - #​6342
• arm: PostgreSQLServerPublicAccessDisabled - #​6330
• terraform: extract image referencers for AWS SageMaker - #​6408

Bug Fix

• ansible: add dict check in create_tasks_vertices - #​6417

v3.2.129

v3.2.128

Feature

• azure: drop support for dotnet v7.0 - #​6383
• general: Image Referencer should not run for CI workflow files - #​6386
• secrets: Add _prioritise_secrets by 3 levels of severity - #​6390
• terraform: add 5 policies - #​6401
• terraform: add 6 policies - #​6396
• terraform: add fix for ckv_aws_300 - #​6404
• terraform: add fix for not contains solver - #​6389

Bug Fix

• ansible: filter conf if its int or float - #​6409
• general: add try except gihub_action read file - #​6411
• general: bitbucket integration test failure - #​6407
• general: CKV2_AZURE_50 generates false positive azurerm_storage_account violations - #​6391
• sast: add log for sast on windows - #​6397

v3.2.127

v3.2.126

v3.2.125

Feature

• arm: Add check for AzureML workspace not configured with private endpoint - #​6387

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.