Skip to content

chore(deps): update dependency checkov to v3.2.130

Soos requested to merge renovate/checkov-patch into main

This MR contains the following updates:

Package Update Change
checkov patch 3.2.124 -> 3.2.130

Release Notes

bridgecrewio/checkov (checkov)

v3.2.130

Compare Source

Feature
  • arm: add CKV_AZURE_135 to ensure Application Gateway WAF prevents message lookup in Log4j2. - #​6364
  • arm: add CKV_AZURE_140 to ensure that Local Authentication is disabled on CosmosDB - #​6329
  • arm: add CKV_AZURE_163 Enable vulnerability scanning for container images - #​6339
  • arm: add MariaDbPublicAccessDisabled convert policy to arm - #​6246
  • arm: AKSLocalAdminDisabled - #​6334
  • arm: AppServiceFTPSState - #​6363
  • arm: AzureServiceFabricClusterProtectionLevel - #​6366
  • arm: ensure ACR disables anonymous pulling of images (CKV_AZURE_138) - #​6373
  • arm: KeyVaultDisablesPublicNetworkAccess - #​6342
  • arm: PostgreSQLServerPublicAccessDisabled - #​6330
  • terraform: extract image referencers for AWS SageMaker - #​6408
Bug Fix
  • ansible: add dict check in create_tasks_vertices - #​6417

v3.2.129

Compare Source

v3.2.128

Compare Source

Feature
  • azure: drop support for dotnet v7.0 - #​6383
  • general: Image Referencer should not run for CI workflow files - #​6386
  • secrets: Add _prioritise_secrets by 3 levels of severity - #​6390
  • terraform: add 5 policies - #​6401
  • terraform: add 6 policies - #​6396
  • terraform: add fix for ckv_aws_300 - #​6404
  • terraform: add fix for not contains solver - #​6389
Bug Fix
  • ansible: filter conf if its int or float - #​6409
  • general: add try except gihub_action read file - #​6411
  • general: bitbucket integration test failure - #​6407
  • general: CKV2_AZURE_50 generates false positive azurerm_storage_account violations - #​6391
  • sast: add log for sast on windows - #​6397

v3.2.127

Compare Source

v3.2.126

Compare Source

v3.2.125

Compare Source

Feature
  • arm: Add check for AzureML workspace not configured with private endpoint - #​6387

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited by Soos

Merge request reports