chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.500 by renovate[bot] · Pull Request #124 · schubergphilis/mcaf-github-workflows

renovate · 2025-08-03T21:30:42Z

This PR contains the following updates:

Package	Type	Update	Change
bridgecrewio/checkov	repository	patch	`3.2.388` → `3.2.500`

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

bridgecrewio/checkov (bridgecrewio/checkov)

`v3.2.500`

Compare Source

Bug Fix

cloudformation: render variables in cfn vertices config - #7423

`v3.2.499`

Compare Source

Feature

general: Add BC_CA_BUNDLE environment variable support for custom CA certificates - #7419
secrets: Override AWS generic check with cortex specific checks - #7420

Bug Fix

terraform: test dates - #7422

`v3.2.498`

Compare Source

`v3.2.497`

Compare Source

Bug Fix

terraform: handle file path instead of directory - #7408

`v3.2.496`

Compare Source

Bug Fix

terraform: CKV_GCP_6 - Added special handling for MSSQL SERVER database type - #7405

`v3.2.495`

Compare Source

Bug Fix

kubernetes: Fix CKV_K8S_21 - #7378

`v3.2.494`

Compare Source

Bug Fix

general: Fixed build workflows of integration test by locking helm version - #7371
terraform: Fixed variable rendering of complex variables to avoid changing type - #7369

`v3.2.493`

Compare Source

Feature

general: support skips for module for_each and count - #7368

`v3.2.492`

Compare Source

Bug Fix

terraform: get_resource_tags handles more cases - #7365

`v3.2.491`

Compare Source

Bug Fix

terraform: Graph report tags should be dict - #7363

`v3.2.490`

Compare Source

Feature

general: Fix downloading of the external modules when ref is a shortened Git hash - #7278

`v3.2.489`

Compare Source

Bug Fix

helm: Check HELM_NAMESPACE env var in CKV_K8S_21 - #7355

`v3.2.488`

Compare Source

Feature

terraform_plan: add new cases for foreach in the presence of skips - #7351

`v3.2.487`

Compare Source

Bug Fix

general: CKV_AWS_174 should-allow-higher-then-TLSv1.2 - terraform and cloudformation - #7352

`v3.2.486`

Compare Source

Feature

general: update setuptools version 78.1.1 - #7347

`v3.2.485`

Compare Source

Bug Fix

general: fix urllib3 dependency - #7345

`v3.2.484`

Compare Source

Bug Fix

terraform_plan: Correctly handle complex types for after_unknown - #7333

`v3.2.483`

Compare Source

Feature

general: anchor setuptools to fix metadata version - #7330
general: update our publishing job SHA to latest - #7332
terraform_plan: fix handling of resource_id for enrichment in tf_plan - #7329

Feature

general: upgrade checkov python version 3.9 - #7326
general: upgrade checkvo python version - #7303
terraform: skip raw tf resource violation - #7325

Bug Fix

general: revert pipfile urllib3 change - #7324

`v3.2.478`

Compare Source

`v3.2.477`

Compare Source

Bug Fix

terraform_plan: compute the longest common prefix between two optional vertex - #7320
terraform_plan: Don't add values to empty list values in after_unknown - #7319

`v3.2.476`

Compare Source

`v3.2.475`

Compare Source

`v3.2.474`

Compare Source

Documentation

general: Add JAVA_FULL_DT environment variable to CLI reference - #7312

`v3.2.473`

Compare Source

no noteworthy changes

`v3.2.472`

Compare Source

Feature

terraform: fix foreach module handling - #7313

`v3.2.471`

Compare Source

Bug Fix

terraform_plan: fix access to list by str in tf plan under _handle_complex_after_unknown - #7299

`v3.2.470`

Compare Source

Bug Fix

helm: Make Helm template detection less aggressive - #7288

`v3.2.469`

Compare Source

Feature

general: Control parallelism - #7286

`v3.2.468`

Compare Source

`v3.2.467`

Compare Source

Bug Fix

serverless: Fixed bad entity code line generation - #7285

`v3.2.466`

Compare Source

Feature

terraform: add aws_vpc_endpoint to RESOURCE_TYPES_JSONIFY - #7281

Bug Fix

general: Add exclusion for plan_with_providers test files in security scanning - #7282

`v3.2.465`

Compare Source

`v3.2.464`

Compare Source

Feature

secrets: support suppressions in JSON files - #7275

`v3.2.463`

Compare Source

`v3.2.462`

Compare Source

`v3.2.461`

Compare Source

Bug Fix

terraform: Handled git external module loading with sub-directory but without protocol - #7272

`v3.2.460`

Compare Source

Bug Fix

general: pin boto3 and botocore versions as failed test in Jenkins - #7270

`v3.2.459`

Compare Source

`v3.2.458`

Compare Source

Bug Fix

terraform: Fix conditional expression evaluation - #7265
terraform: Update FunctionAppsAccessibleOverHttps - #7078

`v3.2.457`

Compare Source

Bug Fix

dockerfile: Use proxy env vars in aiohttp client requests - #7260

`v3.2.456`

Compare Source

Bug Fix

terraform: Parse continue as a string rather as a python object - #7261

`v3.2.455`

Compare Source

`v3.2.454`

Compare Source

Bug Fix

serverless: Fixed extraction of code lines for serverless resources - #7259

`v3.2.453`

Compare Source

`v3.2.452`

Compare Source

Feature

general: Support Py 3.13 on build workflow - #7222

`v3.2.451`

Compare Source

Feature

terraform: Support parsing of provider functions - #7237

`v3.2.450`

Compare Source

Bug Fix

arm: filter out failed checks with resource names containing un-rendered functions - #7231

`v3.2.449`

Compare Source

Bug Fix

terraform: fix cloning external modules from private regsitries - #7229
terraform: fix issue 7216 module version parsing issue - #7224

`v3.2.448`

Compare Source

`v3.2.447`

Compare Source

Bug Fix

terraform: Added support in restricting to a specific GitHub organization for GithubActionsOIDCTrustPolicy - #7221

`v3.2.446`

Compare Source

Feature

kubernetes: include hidden folders in scan - #7219

`v3.2.445`

Compare Source

Bug Fix

helm: fix file paths to point to original files and not generated ones - #7212
secrets: fix omitting and masking - #7218

`v3.2.444`

Compare Source

`v3.2.443`

Compare Source

Bug Fix

secrets: fix omit and masking - #7213

`v3.2.442`

Compare Source

Bug Fix

secrets: fix relative path secrets - #7211

`v3.2.441`

Compare Source

`v3.2.440`

Compare Source

Feature

secrets: Bump detect secrets - #7203

`v3.2.439`

Compare Source

Bug Fix

serverless: Enhance yaml parsing, better support for file expansion - #7115
terraform: Better utilization of managed modules (if enabled) - #7111

`v3.2.438`

Compare Source

`v3.2.437`

Compare Source

Bug Fix

terraform: Handle explicitly-specified tfvars explicitly - #7107

`v3.2.436`

Compare Source

Bug Fix

terraform_plan: Support count in terraform plan files - #7195

`v3.2.435`

Compare Source

Bug Fix

kubernetes: Only filter out files that contain Helm built-in variables and functions - #6922
serverless: check if start and end line in serverless definitions context - #7189

`v3.2.434`

Compare Source

`v3.2.433`

Compare Source

Bug Fix

terraform_plan: add a check to avoid doing get on a none dict object in tfplan scan - #7180

`v3.2.432`

Compare Source

Bug Fix

terraform: Multiple fixes - #7178

`v3.2.431`

Compare Source

`v3.2.430`

Compare Source

`v3.2.429`

Compare Source

Bug Fix

general: Fix support for git external module syntax 'git::git@' - #7175
general: Remove asteval syntax error logs - #7172

`v3.2.428`

Compare Source

`v3.2.427`

Compare Source

Feature

secrets: Revert - Bump detect secrets - #7171

Bug Fix

terraform: dont move clone to internal dir - #7159

`v3.2.426`

Compare Source

Feature

secrets: Bump detect secrets - #7158
terraform: 7 new policies - #7056

`v3.2.425`

Compare Source

`v3.2.424`

Compare Source

Feature

terraform: Add SNS check and modify some - #7154

Bug Fix

secrets: Fix for git-history scan by commits - #7160

`v3.2.423`

Compare Source

`v3.2.422`

Compare Source

Feature

secrets: git-history allow scan by commits list - #7155

Bug Fix

general: exclude start_line and end_line from is empty solver - #7156

`v3.2.421`

Compare Source

`v3.2.420`

Compare Source

Feature

kustomize: export get kustomize resource id to a function - #7153

Bug Fix

general: Skip bc_api_key in output - #7148
terraform: Fixed crash when using variable rendering inside a list of len > 1 - #7151

`v3.2.419`

Compare Source

`v3.2.418`

Compare Source

`v3.2.417`

Compare Source

Breaking Change

general: Remove OpenAI - #7146

`v3.2.416`

Compare Source

Bug Fix

terraform_plan: use provider name not resource address to fix supported_provider matching - #7119

`v3.2.415`

Compare Source

Bug Fix

general: using asteval instead of using eval - #7116

`v3.2.414`

Compare Source

Bug Fix

terraform: Fix protocols for CKV2_AWS_74 and fix for CKV2_K8S_5 - #7134

`v3.2.413`

Compare Source

Feature

terraform: Add new check for overly permissive SQS policy - #7125

Bug Fix

terraform: support CLI notation in CKV_AZURE_228 for EventHub locations - #7124

`v3.2.412`

Compare Source

`v3.2.411`

Compare Source

Feature

secrets: Add support in git history for producer consumer - #7123

Bug Fix

general: Make --download-external-modules Optional[bool] - #7121
secrets: Fix test directory tree race - #7122
terraform: add aws_elasticache_serverless_cache to CKV2_AWS_5 - #7079

`v3.2.410`

Compare Source

`v3.2.409`

Compare Source

`v3.2.408`

Compare Source

Feature

terraform: Over permissive Lambda Cors check (Terraform & Cloudformation) - #7113

Bug Fix

general: base_runner: Properly escape excluded directories that begin with '.' - #7112

`v3.2.407`

Compare Source

Feature

terraform: Add new check and update old around cipher suites - #7108

`v3.2.406`

Compare Source

Bug Fix

kustomize: handle kustomize file with empty resources section - #7109

`v3.2.405`

Compare Source

`v3.2.404`

Compare Source

Bug Fix

terraform: Fix for multiple checks - #7097

`v3.2.403`

Compare Source

Feature

cloudformation: Update Lambda Runtime checks - #7065

`v3.2.402`

Compare Source

Bug Fix

terraform: Change to valid name - #7089
terraform: CKV2_IBM_1 - ignore case for load balancer of type private_path - #7010
terraform: rename test FunctionAppsAccessibleOverHttps - #7085

Documentation

general: Add install for debian - #7083

`v3.2.401`

Compare Source

`v3.2.400`

Compare Source

Bug Fix

general: typos discovered by codespell - #7012
terraform: Update FunctionAppsAccessibleOverHttps - #7084

`v3.2.399`

Compare Source

`v3.2.398`

Compare Source

Bug Fix

general: handle connected_node tuple in CustomJSONEncoder for json report (#7062) - #7063

`v3.2.397`

Compare Source

no noteworthy changes

`v3.2.396`

Compare Source

Bug Fix

terraform: Fix keeping range a range - #7073

`v3.2.395`

Compare Source

Feature

serverless: add check for empty resource attributes - #7074

`v3.2.394`

Compare Source

Bug Fix

terraform: Fix CKV2_GCP_12 and a few tests - #7069

`v3.2.393`

Compare Source

Bug Fix

general: Updated correct connected_node when creating graph report out of all options - #7068

`v3.2.392`

Compare Source

Bug Fix

terraform_plan: Run provider checks against all providers in plan - #7061

`v3.2.391`

Compare Source

Bug Fix

secrets: Bump detect-secrets to not flag AZ secrets in plan files - #7064

`v3.2.390`

Compare Source

Feature

terraform: add raw tf resource to graph - #7047

Bug Fix

general: Fix a few checks - #7051
general: Remove sneaky unicode characters that break a regex and console outputs on Windows - #6987
terraform: CKV_AWS_228 - support new AWS Opensearch TLS policy - #7007

`v3.2.389`

Compare Source

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.457~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.457 - autoclosed Aug 4, 2025

renovate bot closed this Aug 4, 2025

renovate bot deleted the renovate/checkov branch August 4, 2025 03:26

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.457 - autoclosed~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.457 Aug 5, 2025

renovate bot reopened this Aug 5, 2025

renovate bot force-pushed the renovate/checkov branch from eab2854 to d07e7d8 Compare August 5, 2025 12:23

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.457~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.457 - autoclosed Aug 6, 2025

renovate bot closed this Aug 6, 2025

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.457 - autoclosed~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.457 Aug 6, 2025

renovate bot reopened this Aug 6, 2025

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.457~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.458 Aug 6, 2025

renovate bot force-pushed the renovate/checkov branch from d07e7d8 to 18f5a0c Compare August 6, 2025 20:50

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.458~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.458 - autoclosed Aug 7, 2025

renovate bot closed this Aug 7, 2025

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.458 - autoclosed~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.458 Aug 7, 2025

renovate bot reopened this Aug 7, 2025

renovate bot force-pushed the renovate/checkov branch from a944765 to 18f5a0c Compare August 7, 2025 12:53

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.458~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.458 - autoclosed Aug 8, 2025

renovate bot closed this Aug 8, 2025

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.458 - autoclosed~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.458 Aug 8, 2025

renovate bot reopened this Aug 8, 2025

renovate bot force-pushed the renovate/checkov branch from eea1393 to 18f5a0c Compare August 8, 2025 20:37

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.458~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.458 - autoclosed Aug 10, 2025

renovate bot closed this Aug 10, 2025

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.458 - autoclosed~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.458 Aug 10, 2025

renovate bot reopened this Aug 10, 2025

renovate bot force-pushed the renovate/checkov branch from efc81b8 to 18f5a0c Compare August 10, 2025 14:12

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.458~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.460 Aug 10, 2025

renovate bot force-pushed the renovate/checkov branch from 18f5a0c to d6c80b3 Compare August 10, 2025 17:19

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.460~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.460 - autoclosed Aug 10, 2025

renovate bot force-pushed the renovate/checkov branch from 9d16f2b to 8ac5b64 Compare January 28, 2026 01:11

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499 - autoclosed Jan 28, 2026

renovate bot closed this Jan 28, 2026

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499 - autoclosed~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499 Jan 28, 2026

renovate bot reopened this Jan 28, 2026

renovate bot force-pushed the renovate/checkov branch from 8ac5b64 to 9269d08 Compare January 28, 2026 11:00

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499 - autoclosed Jan 29, 2026

renovate bot closed this Jan 29, 2026

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499 - autoclosed~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499 Jan 29, 2026

renovate bot reopened this Jan 29, 2026

renovate bot force-pushed the renovate/checkov branch from 9269d08 to b07e0b5 Compare January 29, 2026 12:58

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499 - autoclosed Jan 30, 2026

renovate bot closed this Jan 30, 2026

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499 - autoclosed~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499 Jan 30, 2026

renovate bot reopened this Jan 30, 2026

renovate bot force-pushed the renovate/checkov branch 2 times, most recently from b07e0b5 to 57ec8e1 Compare January 30, 2026 04:43

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499 - autoclosed Jan 30, 2026

renovate bot closed this Jan 30, 2026

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499 - autoclosed~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499 Jan 30, 2026

renovate bot reopened this Jan 30, 2026

renovate bot force-pushed the renovate/checkov branch 2 times, most recently from 7e6a9d0 to c1ec924 Compare February 1, 2026 14:21

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.499~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.500 Feb 1, 2026

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.500~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.500 - autoclosed Feb 5, 2026

renovate bot closed this Feb 5, 2026

chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.500

1ccdebc

renovate bot changed the title ~~chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.500 - autoclosed~~ chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.500 Feb 5, 2026

renovate bot reopened this Feb 5, 2026

renovate bot force-pushed the renovate/checkov branch from c1ec924 to 1ccdebc Compare February 5, 2026 14:15

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.500#124

chore(deps): update pre-commit hook bridgecrewio/checkov to 3.2.500#124
renovate[bot] wants to merge 1 commit intomainfrom
renovate/checkov

renovate bot commented Aug 3, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Aug 3, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fix

Feature

Bug Fix

Bug Fix

Bug Fix

Bug Fix

Bug Fix

Feature

Bug Fix

Bug Fix

Feature

Bug Fix

Feature

Bug Fix

Feature

Bug Fix

Bug Fix

Feature

Feature

Bug Fix

Bug Fix

Documentation

Feature

Bug Fix

Bug Fix

Feature

Bug Fix

Feature

Bug Fix

Feature

Bug Fix

Bug Fix

Bug Fix

Bug Fix

Bug Fix

Bug Fix

Feature

Feature

Bug Fix

Bug Fix

Bug Fix

Feature

Bug Fix

Bug Fix

Bug Fix

Feature

Bug Fix

Bug Fix

Bug Fix

Bug Fix

Bug Fix

Bug Fix

Bug Fix

Feature

Bug Fix

Feature

Feature

Bug Fix

Feature

Bug Fix

renovate bot commented Aug 3, 2025 •

edited

Loading