chore(deps): update dependency checkov to v3.0.40 (!140) · Merge requests · GitLab.com / GitLab Infrastructure Team / platform / Runway / runwayctl · GitLab

RENOVATE_GITLAB_TOKEN requested to merge renovate/checkov-updatetype into main Nov 19, 2023

This MR contains the following updates:

Package	Update	Change
checkov	patch	`3.0.13` -> `3.0.40`

Release Notes

bridgecrewio/checkov (checkov)

`v3.0.40`

`v3.0.39`

`v3.0.38`

Feature

terraform: Adding YAML based build time policies for corresponding PC runtime policies - #5714

`v3.0.37`

Bug Fix

terraform: fix valid value for aws keyspaces_table encryption_specification type - #5756

`v3.0.36`

Bug Fix

terraform: check min TLS version also on azure app slots - #5753

`v3.0.35`

`v3.0.34`

Feature

general: add possibility to change parallelization type - #5737

Bug Fix

cloudformation: ignore unresolved references in CKV_AWS_45 - #5747

`v3.0.33`

`v3.0.32`

Feature

sast: Python cdk policies batch 2 - #5725

Bug Fix

general: add option to pass --skip-download with github-action - #5734

Platform

general: print the log upload location if the --support flag is used - #5738

`v3.0.31`

`v3.0.30`

`v3.0.29`

`v3.0.28`

Bug Fix

terraform: Adding both azurerm_linux_web_app_slot & azurerm_windows_web_app_slot in scope of the test CKV_AZURE_153 - #5687

Documentation

general: Switch references to Bridgecrew with Prisma Cloud - #5704

`v3.0.27`

`v3.0.26`

`v3.0.25`

Bug Fix

general: do not require a repo ID when using an API key and --list - #5726

`v3.0.24`

Feature

sast: add new python CDK policies - #5706
terraform: Ensure that only critical system pods run on system nodes - #5665

`v3.0.23`

`v3.0.22`

`v3.0.21`

Feature

terraform: Ensure App Service Environment is zone redundant - #5662
terraform: Ensure that Standard Replication is enabled - #5649

Bug Fix

sca: Setting only relevant cves for the extracted reachable functions with risk factor of ReachableFunction as True - #5715
terraform: CKV_AWS_208 valid Amazon MQ versions - #5653

`v3.0.20`

`v3.0.19`

Feature

sca: adjusting the cli-output to support indicating of reachable functions - #5713
terraform: Adding YAML based build time policies for corresponding PC runtime policies - #5637
terraform: bigtable deletion protection [depends on #5625] - #5626
terraform: drop and deletion checks for spanner - #5625

Bug Fix

sast: add cveid to reachability report - #5708

`v3.0.18`

`v3.0.17`

`v3.0.16`

Feature

sca: Extending reachability post-runner in checkov and enriching cves with ReachableFunction data - #5707

`v3.0.15`

Bug Fix

general: fix duplicate components in CycloneDX report - #5705

`v3.0.14`

Bug Fix

general: address python 3.12 SyntaxWarning - #5699
terraform: fix variable rendering for foreach resources with dot included names - #5701

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.