Skip to content

Tags: bridgecrewio/checkov

Tags

3.2.382

feat(secrets): Bump detect-secrets to remove more lock files (#7039)

Bump secrets

3.2.381

fix(general): prevent connected_node attribute from being overidden (#…

…7032)

* fix(general): prevent connected_node attribute from being overriden by each check

* some refactor

* tests

* MR comments

* some mypy fixes

* flake8

* dummy

* dummy

* dummy

* dummy

* dummy

3.2.380

fix(secrets): ckv_secret_80 filtering fix (#7037)

* fix

* fix

* fix

* fix

3.2.379

feat(terraform): Add azure DB checks for flexible server private endp…

…oints (#7030)

* Add CKV2_AZURE_44 but flexible server

* CKV2_AZURE_42 but flexible server

3.2.378

fix(secrets): Remove CKV_SECRET_80 instead of CKV_SECRET_6 (#7029)

* .

* .

* make base64 secret to be removed

* lint

* lint

* lint

---------

Co-authored-by: pazbechor <pbechor@paloaltonetworks.com>

3.2.377

fix(secrets): Fix Duplicated Violation in line bug (#7027)

* try

* remove back to old code

* fix and remove the redundant secret

* add try except for safety reasons

* fix all

* .

---------

Co-authored-by: pazbechor <pbechor@paloaltonetworks.com>

3.2.376

Unverified

This commit is not signed, but one or more authors requires that any commit attributed to them is signed.
feat(terraform): adding 3 policies & tests (#7011)

* adding 3 policies + tests

* fix by flake8

* WhoAMI vulnerability

* flake8 - remove typing.List

* Update checkov/terraform/checks/resource/aws/WhoAMI.py

Co-authored-by: Taylor <28880387+tsmithv11@users.noreply.github.com>

* Update checkov/terraform/checks/resource/azure/StorageSyncServicePermissiveAccess.py

Co-authored-by: Taylor <28880387+tsmithv11@users.noreply.github.com>

* Update checkov/terraform/checks/resource/azure/VMDiskWithPublicAccess.py

Co-authored-by: Taylor <28880387+tsmithv11@users.noreply.github.com>

* Update checkov/terraform/checks/resource/oci/DataCatalogWithPublicAccess.py

Co-authored-by: Taylor <28880387+tsmithv11@users.noreply.github.com>

* Update checkov/terraform/checks/resource/azure/VMDiskWithPublicAccess.py

Co-authored-by: Taylor <28880387+tsmithv11@users.noreply.github.com>

* Update checkov/terraform/checks/resource/oci/DataCatalogWithPublicAccess.py

Co-authored-by: Taylor <28880387+tsmithv11@users.noreply.github.com>

* change resource to data policy

---------

Co-authored-by: Taylor <28880387+tsmithv11@users.noreply.github.com>
Co-authored-by: Aviad Hahami <ahahami@paloaltonetworks.com>

3.2.375

fix(terraform): Handle new resource type for CKV_GCP_73 (#7023)

* fix

* Fix flake8

* max feedback - preview first

3.2.374

fix(cloudformation): Handle subs in CKV_AWS_384 (#7022)

Fix

3.2.373

fix(terraform): CKV_GCP_74, CKV_GCP_76 incorrectly enforced for REGIO…

…NAL and GLOBAL managed proxy networks (#7002)

* Added additional purpose exceptions for Google Subnetwork private_ip_google_access check

* Added google_private_access purpose exclusions for IPv6. Fixed IPv6 policy filename and class name

* Fix flake8 1

* Fix flake8 2

---------

Co-authored-by: Joshua Brule <brule.joshua@mayo.edu>
Co-authored-by: Taylor <28880387+tsmithv11@users.noreply.github.com>