All pull requests

Pull requests

• fix(kubernetes): scan manifests when the -d root contains a hidden directory

  #7768·atg06 opened Oct 24, 2026·4 tasks done·

  ·
  1

• fix(kubernetes): respect matchExpressions in NetworkPolicy podSelector

  #7767·protonnegativo opened Oct 24, 2026·4 of 5 tasks·

  ·
  1

• feat(kubernetes): add CKV_K8S_161 — flag Secrets containing literal credential data

  #7764·mallyagirish opened Oct 22, 2026·

  ·

• fix(dockerfile): fold heredocs with any delimiter instead of only <<EOF

  #7763·Varshith-Kali opened Oct 21, 2026·

  ·
  1

  4

• fix(terraform): CKV_AWS_382 evaluates egress blocks after a self block

  #7761·Varshith-Kali opened Oct 20, 2026·3 tasks done·

  ·
  1

  4

• fix(terraform): add optional allowlist for external module download sources

  #7758·talazuri opened Oct 20, 2026Contributor·5 tasks·

  ·
  1

• fix(general): load object-runner files in one batch instead of once per directory (~99% less sys time)

  #7756·anze3db opened Oct 20, 2026·4 of 5 tasks·

  ·

• feat(terraform): add CKV_AZURE_253 for Container App insecure ingress

  #7755·rahimahisah17 opened Oct 19, 2026·3 of 5 tasks·

  ·

• fix(terraform): fail CKV_GCP_18 when master_authorized_networks_config is absent

  #7754·Varshith-Kali opened Oct 19, 2026·4 of 5 tasks·

  ·
  1

  4

• fix(terraform): flag IPv6 ::/0 in EKS public_access_cidrs check (CKV_AWS_38)

  #7752·Varshith-Kali opened Oct 18, 2026·4 of 5 tasks·

  ·
  1

  4

• fix(terraform): flag IPv6 ::/0 source ranges in GCP firewall unrestricted ingress checks

  #7750·7-Bala opened Oct 17, 2026·4 of 5 tasks·

  ·
  1

• docs(cdk): Update CDK documentation to use .addMetadata and small cleanup.

  #7748·AlastairMiller opened Oct 16, 2026·1 task done·

  ·

• feat(terraform): add CKV_AWS_395 to ensure IAM role max session duration does not exceed 1 hour

  #7747·HaroonArshad-53 opened Oct 16, 2026·4 of 5 tasks·

  ·

• fix(terraform): don't pass open security groups in CKV_AWS_24/25/260/277

  #7746·yadlapatisathwik opened Oct 15, 2026·4 of 5 tasks·

  ·
  1

• fix(terraform): check public_network_access on MySQL flexible servers in CKV_AZURE_53

  #7744·cristianchiriac opened Oct 15, 2026·4 tasks done·

  ·
  1

• chore(general): Drop Python 3.9 support

  #7742·Saarett opened Oct 15, 2026Contributor·5 tasks·

  ·
  1

• Feature/terraform diff files only scan

  #7741·AdamDev opened Oct 14, 2026Contributor·5 tasks·

  ·
  1

• fix(arm): avoid IndexError when resourceId is not a resourceId() call

  #7740·unknownhackerworld opened Oct 11, 2026·4 of 5 tasks·

  ·
  1

  1

• fix(terraform): add value-based fallback for cross-module graph edge resolution

  #7735·talazuri opened Oct 11, 2026Contributor·5 tasks·

  ·
  3

• fix: include graph check YAML definitions in the sdist

  #7733·Varshith-Kali opened Oct 10, 2026·

  ·
  1

  4

• fix(terraform): pass FIPS_202205 profile in CKV_GCP_4

  #7732·moneytool opened Oct 8, 2026·4 tasks done·

  ·
  1

• feat(kustomize): allow selecting renderer command

  #7731·MasadiPradeepRao opened Oct 8, 2026·

  ·
  1

• fix(terraform): connect references with a literal index to count-expanded resources

  #7730·moneytool opened Oct 8, 2026·4 tasks done·

  ·
  1

• fix(general): keep JSON output structure consistent when no reports are produced

  #7719·UsmanQT opened Oct 4, 2026·3 tasks done·

  ·
  1

• fix(terraform): add missing GCP resources to taggable list

  #7718·UsmanQT opened Oct 4, 2026·3 tasks done·

  ·
  1