All pull requests

Pull requests

• fix(arm): avoid IndexError when resourceId is not a resourceId() call

  #7740·unknownhackerworld opened Oct 11, 2026·4 of 5 tasks·

  ·
  1

  1

• fix(terraform): extend MySQL public access check to cover flexible server resources

  #7737·talazuri opened Oct 11, 2026Contributor·5 tasks·

  ·

• fix(terraform): add value-based fallback for cross-module graph edge resolution

  #7735·talazuri opened Oct 11, 2026Contributor·5 tasks·

  ·
  3

• fix: include graph check YAML definitions in the sdist

  #7733·Varshith-Kali opened Oct 10, 2026·

  ·
  1

• fix(terraform): pass FIPS_202205 profile in CKV_GCP_4

  #7732·moneytool opened Oct 8, 2026·4 tasks done·

  ·
  1

• feat(kustomize): allow selecting renderer command

  #7731·MasadiPradeepRao opened Oct 8, 2026·

  ·
  1

• fix(terraform): connect references with a literal index to count-expanded resources

  #7730·moneytool opened Oct 8, 2026·4 tasks done·

  ·
  1

• fix(general): keep JSON output structure consistent when no reports are produced

  #7719·UsmanQT opened Oct 4, 2026·3 tasks done·

  ·
  1

• fix(terraform): add missing GCP resources to taggable list

  #7718·UsmanQT opened Oct 4, 2026·3 tasks done·

  ·
  1

• docs(gha): explain CKV2_GHA_1 and how to fix it

  #7717·basitalisandhu opened Oct 4, 2026·3 of 5 tasks·

  ·
  1

• fix(kubernetes): evaluate ephemeralContainers in container checks

  #7716·ranas-mukminov opened Oct 4, 2026·4 of 5 tasks·

  ·

• feat(terraform): add CKV_AZURE_252 to ensure GitHub flexible federated identity credentials match an immutable repository claim

  #7715·harshit3355 opened Oct 3, 2026·4 of 5 tasks·

  ·
  1

• chore(deps): bump django from 1.2 to 5.2.17 in /tests/sca_package_2/examples

  dependenciespython
  #7711·dependabot[bot] opened Oct 1, 2026Bot·

  ·

• fix(terraform): evaluate every statement in GitHub OIDC trust-policy checks (CKV_AWS_358, CKV_AWS_393)

  #7710·AbdallahKhaldi opened Sep 30, 2026·4 of 5 tasks·

  ·

• feat(kubernetes): add Argo Rollouts graph support

  #7709·DerekhChokhmah opened Sep 30, 2026·

  ·

• fix(kubernetes): correlate secret rules with resourceNames

  #7706·0xTaoZ opened Sep 29, 2026·

  ·
  1

  2

• feat(kubernetes): run pod security checks on Argo Rollouts

  #7705·shariqueahmad108-ship-it opened Sep 28, 2026·4 of 5 tasks·

  ·

• docs: correct kustomization.yaml filename in Kustomize scan example, and typos

  #7704·toyeshhm opened Sep 25, 2026·

  ·

• fix(general): scope --baseline matches to the file the finding was recorded in

  #7703·shariqueahmad108-ship-it opened Sep 25, 2026·4 of 5 tasks·

  ·
  1

• fix(terraform): pass CKV_AWS_159 for Athena workgroups using managed query results

  #7702·shariqueahmad108-ship-it opened Sep 25, 2026·4 of 5 tasks·

  ·
  1

• fix(general): harden network and credential handling defaults

  #7701·talazuri opened Sep 24, 2026Contributor·5 tasks·

  ·

• Fix Terraform tag rendering in for_each modules

  #7699·jstar0 opened Sep 24, 2026·

  ·
  1

• fix(terraform): handle depth query parameter in git_loader

  #7698·Raybuntu opened Sep 23, 2026·3 of 5 tasks·

  ·
  1

• fix(openapi): handle permission errors in runner

  #7697·Shiv-70 opened Sep 23, 2026·3 of 5 tasks·

  ·
  1

• fix(kubernetes): scope RoleBinding Role connections by namespace

  #7696·loyce-cheng opened Sep 23, 2026·3 of 5 tasks·

  ·
  1