Skip to content

deps(python): bump checkov from 3.2.163 to 3.2.190 in /dependencies/python - #5879

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/dependencies/python/checkov-3.2.190
Jul 16, 2024
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/dependencies/python/checkov-3.2.190

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2024

Copy link
Copy Markdown
Contributor

Bumps checkov from 3.2.163 to 3.2.190.

Release notes

Sourced from checkov's releases.

3.2.189

Feature

  • arm: add CKV_AZURE_169 to ensure that AKS use the Paid Sku for its SLA - #6545
  • arm: add CKV_AZURE_177 to ensure that Windows VM enables automatic updates - #6484
  • cloudformation: Update audit_logs valid values - #6566

3.2.186

Feature

  • azure: add new policies for Azure Synapse (tf and arm) - #6554
  • bicep: support bicep custom policy - #6561

Bug Fix

  • arm: CKV_AZURE_56 just for authsettingsV2 name - #6557
  • secrets: filter secrets that have vault: in them - #6565

3.2.183

Feature

  • terraform_plan: support tf_plan after_unknown enrichment - #6517

Bug Fix

  • secrets: small fix for filtering - #6562

Platform

  • general: pass repo ID to runconfig - #6560

3.2.179

Feature

  • arm: add CKV_AZURE_206 to ensure that Storage Accounts use replication - #6524
  • arm: BCE-33785 Support Azure Synapse Analytics policies - #6513

3.2.177

Bug Fix

  • sast: fix cdk policies - #6552

3.2.175

Feature

  • arm: AzureSearchSQLQueryUpdates - #6543

3.2.174

Feature

... (truncated)

Changelog

Sourced from checkov's changelog.

CHANGELOG

Unreleased

3.2.189 - 2024-07-14

Feature

  • arm: add CKV_AZURE_169 to ensure that AKS use the Paid Sku for its SLA - #6545
  • arm: add CKV_AZURE_177 to ensure that Windows VM enables automatic updates - #6484
  • cloudformation: Update audit_logs valid values - #6566

3.2.186 - 2024-07-11

Feature

  • azure: add new policies for Azure Synapse (tf and arm) - #6554
  • bicep: support bicep custom policy - #6561

Bug Fix

  • arm: CKV_AZURE_56 just for authsettingsV2 name - #6557
  • secrets: filter secrets that have vault: in them - #6565

3.2.183 - 2024-07-10

Feature

  • terraform_plan: support tf_plan after_unknown enrichment - #6517

Bug Fix

  • secrets: small fix for filtering - #6562

Platform

  • general: pass repo ID to runconfig - #6560

3.2.179 - 2024-07-09

Feature

  • arm: add CKV_AZURE_206 to ensure that Storage Accounts use replication - #6524
  • arm: BCE-33785 Support Azure Synapse Analytics policies - #6513

3.2.177 - 2024-07-08

Bug Fix

  • sast: fix cdk policies - #6552

... (truncated)

Commits
  • bd65342 feat(arm): add CKV_AZURE_75 data explorer double encryption enabled convert p...
  • b22576b feat(arm): add CKV_AZURE_75 data explorer double encryption enabled convert p...
  • 0efe05d feat(arm): add CKV_AZURE_75 data explorer double encryption enabled convert p...
  • 432e251 chore: update release notes
  • 896c833 feat(arm): add CKV_AZURE_169 to ensure that AKS use the Paid Sku for its SLA ...
  • a37f48a feat(arm): add CKV_AZURE_169 to ensure that AKS use the Paid Sku for its SLA ...
  • 703dd40 feat(arm): add CKV_AZURE_169 to ensure that AKS use the Paid Sku for its SLA ...
  • c69004c feat(arm): add CKV_AZURE_177 to ensure that Windows VM enables automatic upda...
  • c7c5bef feat(arm): add CKV_AZURE_177 to ensure that Windows VM enables automatic upda...
  • 5eaaed6 feat(arm): add CKV_AZURE_177 to ensure that Windows VM enables automatic upda...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [checkov](https://github.com/bridgecrewio/checkov) from 3.2.163 to 3.2.190.
- [Release notes](https://github.com/bridgecrewio/checkov/releases)
- [Changelog](https://github.com/bridgecrewio/checkov/blob/main/CHANGELOG.md)
- [Commits](bridgecrewio/checkov@3.2.163...3.2.190)

---
updated-dependencies:
- dependency-name: checkov
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from zkoppert as a code owner July 15, 2024 13:14
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 15, 2024
@dependabot
dependabot Bot requested a review from Hanse00 as a code owner July 15, 2024 13:14
@dependabot dependabot Bot added the python Pull requests that update Python code label Jul 15, 2024
@dependabot
dependabot Bot requested a review from ferrarimarco as a code owner July 15, 2024 13:14
@github-actions
github-actions Bot enabled auto-merge July 15, 2024 13:14
@ferrarimarco ferrarimarco added this to the 6.8.0 milestone Jul 16, 2024
@github-actions
github-actions Bot added this pull request to the merge queue Jul 16, 2024
Merged via the queue into main with commit 47392ad Jul 16, 2024
@dependabot
dependabot Bot deleted the dependabot/pip/dependencies/python/checkov-3.2.190 branch July 16, 2024 13:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant