C
3.4.3
Bug Fix terraform: build userinfo test URLs dynamically - #7776
C
3.4.2
Bug Fix general: harden network and credential handling defaults - #7701 terraform: add optional allowlist for external module download sources - #7758
C
3.4.1
Merge 97bb90c into 3bdc054…
C
3.4.0
no noteworthy changes
C
3.3.30
Bug Fix secrets: load platform-provided detectors in spawn-mode secrets … - #7757
C
3.3.29
Bug Fix terraform: extend MySQL public access check to cover flexible server resources - #7737
C
3.3.28
Bug Fix terraform: resolve graph edges for count/for_each indexed resource references - #7736
C
3.3.27
Bug Fix secrets: detect paired AWS secret in bare CSV/delimited format - #7734
C
3.3.26
Bug Fix terraform_plan: resolve for_each module calls in plan parser - #7723
C
3.3.25
Bug Fix helm: source folder should be within the directory - #7722 kustomize: fix file path logic - #7720 terraform: avoid tmp_path in git loader tests - #7726 terraform: external module ref keeps inside directory - #7721
C
3.3.24
Merge b4fd36e into 768bcb4…
C
3.3.23
Bug Fix sca: apply --skip-path regex and hidden-dir filtering to sca_package - #7712
C
3.3.22: chore(secrets): bump bc-detect-secrets from 1.5.50 to 1.5.52 (#7708)
chore(deps): bump bc-detect-secrets from 1.5.50 to 1.5.52 Picks up an accuracy fix in AzureStorageKeyDetector: the existing Cosmos DB skip in integrity_regex was case-sensitive and missed Pascal-case identifiers (e.g. CosmosDbConnectionString) as well as bare documents.azure.com endpoints, causing Cosmos DB connection strings to be reported as Azure Storage Account access keys. Upstream fix: bridg…
C
3.3.21
Bug Fix terraform_json: handle HCL JSON array and single-dict block formats in parser - #7707
C
3.3.20
Bug Fix terraform_plan: skip resources being removed from state ('forget' action) - #7676
C
3.3.19
Feature terraform: add CKV_AWS_394 for unconstrained aws_availability_zones data source - #7658
C
3.3.18
feat(terraform): add CKV_AWS_394 for unconstrained aws_availability_z…
C
3.3.17
Bug Fix general: honour scope.provider for platform-downloaded custom po… - #7677
C
3.3.16
Bug Fix terraform: Added current Azure Terraform resources and taggable resources as of hashicorp/azurerm provider version 4.81 - #7652
C
3.3.15
Bug Fix sca: match CVE suppressions case-insensitively - #7659 sca: match CvesAccounts suppressions on unprefixed account ids - #7660
C
3.3.14: fix(sca): match CVE suppressions case-insensitively (#7659)
fix(sca): match CVE suppressions case-insensitively chore(ci): pin pipenv on all python versions chore(ci): pin pipenv and bump danger-check to node 20
C
3.3.13
Bug Fix kubernetes: Fix K8S suppressions annotations - #7651
C
3.3.12
Bug Fix sca: correct Windows path handling in image referencer - #7650
C
3.3.11: chore(secrets): bump detect-secrets to 1.5.49 (#7646)
bump detect-secrets to 1.5.49
C
3.3.10: chore(general): allow aiohttp 3.14.x (#7642)
chore(deps): allow aiohttp 3.14.x
C
3.3.9
Bug Fix terraform: handle null container_properties in aws_batch_job_def… - #7636
C
3.3.8
Bug Fix kubernetes: CKV_K8S_40 should pass when hostUsers is false - #7580
C
3.3.7
Feature general: fix github only output for sca - #7598
C
3.3.6
Bug Fix terraform: prevent crash in S3AllowsAnyPrincipal with unparsed v… - #7581
C
3.3.5
Feature general: fix danger node version - #7589 Bug Fix general: retry kustomize/helm install to survive transient GitHub failures - #7591 terraform: CKV_AZURE_190 override singular get_expected_value - #7592