Skip to content

chore(deps): update checkov-minor

Renovate Bot requested to merge renovate/checkov-minor into main

This MR contains the following updates:

Package Type Update Change
bridgecrewio/checkov minor 2.4.48 -> 2.5.18
bridgecrewio/checkov repository minor 2.3.358 -> 2.5.20
checkov minor 2.4.48 -> 2.5.20

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

bridgecrewio/checkov (bridgecrewio/checkov)

v2.5.18

Compare Source

Feature
  • general: Adds GHA support for skip-frameworks, skip-cve-package & output-bc-ids flags - #​5619
  • terraform: Ensure that the SQL database is zone-redundant - #​5540
  • terraform: Ensure the Azure Event Hub Namespace is zone redundant - #​5538
Bug Fix
  • bicep: enforce encryption flag to be string for CKV_AZURE_97 - #​5669
  • terraform_plan: Add provisioners to TF Plan parser - #​5622

v2.5.15

Compare Source

Feature
  • terraform: Support for merge func inside jsondecode - #​5656
Bug Fix
  • sca: make the abs path to be correcnt - #​5660

v2.5.13

Compare Source

Feature
  • arm: implement CKV_AZURE_103 for ARM - #​5527
  • arm: implement CKV_AZURE_96 for ARM - #​5506
  • arm: implement CKV_AZURE_97 for ARM - #​5515
Bug Fix
  • terraform: Added a check to make sure dynamic "blocks" are of the expected type - #​5642
  • terraform: update CKV_AWS_339 valid EKS versions - #​5652

v2.5.11

Compare Source

Feature
  • sca: giving file path on relative the the current dir for cases there is no either specified root_folder and the is no repo scan dir - #​5654

v2.5.10

Compare Source

Feature
  • terraform: support scanning of Terraform managed modules instead of downloading them - #​5635
Bug Fix
  • terraform: Fixing issues with checks CKV_AZURE_226 & CKV_AZURE_227 - #​5638

v2.5.9

Compare Source

Feature
  • sca: support case where there are no cves suppressions - #​5636

v2.5.8

Compare Source

Feature
  • general: Remove code upload for on-prem integrations - #​5624

v2.5.6

Compare Source

Feature
  • arm: implement CKV_AZURE_95 for ARM - #​5500
  • general: Added source and target to edge data - #​5621
Bug Fix
  • terraform_plan: add azurerm_portal_dashboard to jsonify list - #​5618
  • terraform: check if the dynamic name is one of the resources block - #​5607

v2.5.3

Compare Source

Breaking Change
  • general: remove Python 3.7 - #​5605
  • graph: remove CHECKOV_CREATE_GRAPH env var to control graph creation - #​5606
Bug Fix
  • dockerfile: fix Docker image scan - #​5617
  • openapi: Take into account that security is at the root level of your OpenAPI specification. - #​5603
  • terraform: stop CKV_GCP_43 crashing when not a string - #​5561

v2.4.61

Compare Source

Bug Fix
  • terraform: fix upload resource_subgraph_maps - #​5615
Platform
  • terraform: Upload resource subgraph map - #​5612

v2.4.59

Compare Source

Platform
  • terraform: fix in subgraphs uploads - #​5610

v2.4.58

Compare Source

Platform
  • terraform: upload tf sub graphs - #​5596

v2.4.57

Compare Source

Feature
  • terraform: Ensure ephemeral disks are used for OS disks - #​5584
  • terraform: Ensure that App Service plan is zone redundant - #​5577
  • terraform: Ensure that the AKS cluster encrypt temp disks, caches, and data flows between Compute and Storage resources - #​5588

v2.4.55

Compare Source

Feature
  • general: Add image referencer rustworkx support - #​5564
  • general: Add rustworkx support - #​5595
  • terraform: Adding 2 new AWS policies - #​5599
  • terraform: simply IMDSv2 checks - #​5601

v2.4.51

Compare Source

Feature
  • arm: CKV_AZURE_88 convert to arm check - #​5465
  • arm: implement CKV_AZURE_149 for ARM - #​5496
Bug Fix
  • terraform: Adding missing null checks - #​5589

v2.4.50

Compare Source

Feature

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Merge request reports