All pull requests

Pull requests

• fix(terraform): catch disabled and portless GCP firewall rules

  #7793·anandhx opened Nov 7, 2026·4 tasks done·

  ·
  2

• fix(terraform): skip disabled firewall rules in GCP unrestricted ingress checks

  #7792·LF3551 opened Nov 6, 2026·4 of 5 tasks·

  ·
  1

• feat(general): add Pulumi framework

  #7788·sprioriello opened Nov 6, 2026·4 tasks done·

  ·
  1

• fix(github_actions): accept cache-mode key and report schema-invalid workflows

  #7787·Varshith-Kali opened Nov 5, 2026·

  ·
  1

• feat(terraform): add CKV2_AWS_79 to ensure Security Hub has a standards subscription

  #7785·Shanmukh-l33t opened Nov 5, 2026·4 tasks done·

  ·
  1

• feat(terraform): add CKV_AWS_398 Cognito user pool advanced security ENFORCED

  #7784·Goldloli opened Nov 4, 2026·4 of 5 tasks·

  ·
  1

• fix(terraform): use matched query param when parsing registry archive extension

  #7781·liambeck99 opened Nov 3, 2026·3 of 5 tasks·

  ·
  1

• fix(terraform): read GitLab 19 replacement resources in CKV_GLB_1/3/4

  #7779·Varshith-Kali opened Nov 3, 2026·

  ·
  1

  1

• fix(general): pass array_hook to JSONArray on Python 3.15

  #7778·thelastbackspace opened Nov 3, 2026·3 of 4 tasks·

  ·
  1

• fix(arm): handle authsettingsV2 in App Service checks

  #7775·sarankumar1325 opened Oct 29, 2026·4 of 5 tasks·

  ·
  1

• fix(arm): treat "false" string values as disabled in CKV_AZURE_173

  #7774·sarankumar1325 opened Oct 29, 2026·3 of 4 tasks·

  ·
  1

• fix(terraform): ignore extra query parameters like depth when cloning git modules

  #7773·sarankumar1325 opened Oct 29, 2026·4 of 5 tasks·

  ·
  1

• fix(kubernetes): scan manifests when the -d root contains a hidden directory

  #7768·atg06 opened Oct 24, 2026·4 tasks done·

  ·
  1

• fix(kubernetes): respect matchExpressions in NetworkPolicy podSelector

  #7767·protonnegativo opened Oct 24, 2026·4 of 5 tasks·

  ·
  1

• feat(kubernetes): add CKV_K8S_161 — flag Secrets containing literal credential data

  #7764·mallyagirish opened Oct 22, 2026·

  ·
  2

• fix(dockerfile): fold heredocs with any delimiter instead of only <<EOF

  #7763·Varshith-Kali opened Oct 21, 2026·

  ·
  1

  4

• fix(terraform): CKV_AWS_382 evaluates egress blocks after a self block

  #7761·Varshith-Kali opened Oct 20, 2026·3 tasks done·

  ·
  1

  4

• fix(general): load object-runner files in one batch instead of once per directory (~99% less sys time)

  #7756·anze3db opened Oct 20, 2026·4 of 5 tasks·

  ·

• feat(terraform): add CKV_AZURE_253 for Container App insecure ingress

  #7755·rahimahisah17 opened Oct 19, 2026·3 of 5 tasks·

  ·

• fix(terraform): fail CKV_GCP_18 when master_authorized_networks_config is absent

  #7754·Varshith-Kali opened Oct 19, 2026·4 of 5 tasks·

  ·
  1

  4

• fix(terraform): flag IPv6 ::/0 in EKS public_access_cidrs check (CKV_AWS_38)

  #7752·Varshith-Kali opened Oct 18, 2026·4 of 5 tasks·

  ·
  1

  4

• fix(terraform): flag IPv6 ::/0 source ranges in GCP firewall unrestricted ingress checks

  #7750·7-Bala opened Oct 17, 2026·4 of 5 tasks·

  ·
  1

• docs(cdk): Update CDK documentation to use .addMetadata and small cleanup.

  #7748·AlastairMiller opened Oct 16, 2026·1 task done·

  ·

• feat(terraform): add CKV_AWS_395 to ensure IAM role max session duration does not exceed 1 hour

  #7747·HaroonArshad-53 opened Oct 16, 2026·4 of 5 tasks·

  ·

• fix(terraform): don't pass open security groups in CKV_AWS_24/25/260/277

  #7746·yadlapatisathwik opened Oct 15, 2026·4 of 5 tasks·

  ·
  1