Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: Checkmarx/kics
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.1.7
Choose a base ref
...
head repository: Checkmarx/kics
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v2.1.8
Choose a head ref
  • 11 commits
  • 91 files changed
  • 10 contributors

Commits on Apr 22, 2025

  1. ci(deps): bump the all group across 1 directory with 2 updates (#7446)

    Bumps the all group with 2 updates in the / directory: [github/codeql-action](https://github.com/github/codeql-action) and [checkmarx/kics-github-action](https://github.com/checkmarx/kics-github-action).
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Apr 22, 2025
    Configuration menu
    Copy the full SHA
    eb40491 View commit details
    Browse the repository at this point in the history

Commits on Apr 29, 2025

  1. fix(queries): support all valid CloudWatch Logs retention periods (#7450

    )
    
    * Support all valid CloudWatch Logs retention periods
    
    Pulled from latest documentation @ https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_log_group
    
    * fix AWS CWL retention period valid values for terraform and ansible
    
    ---------
    
    Co-authored-by: jb <git@noxowa.com>
    jamesbascle and jb authored Apr 29, 2025
    Configuration menu
    Copy the full SHA
    f32f9c8 View commit details
    Browse the repository at this point in the history

Commits on Apr 30, 2025

  1. ci(deps): bump the all group across 1 directory with 2 updates (#7453)

    Bumps the all group with 2 updates in the / directory: [docker/build-push-action](https://github.com/docker/build-push-action) and [anchore/scan-action](https://github.com/anchore/scan-action).
    
    
    Updates `docker/build-push-action` from 6.15.0 to 6.16.0
    - [Release notes](https://github.com/docker/build-push-action/releases)
    - [Commits](docker/build-push-action@471d1dc...14487ce)
    
    Updates `anchore/scan-action` from 6.1.0 to 6.2.0
    - [Release notes](https://github.com/anchore/scan-action/releases)
    - [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md)
    - [Commits](anchore/scan-action@7c05671...2c901ab)
    
    ---
    updated-dependencies:
    - dependency-name: docker/build-push-action
      dependency-version: 6.16.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: all
    - dependency-name: anchore/scan-action
      dependency-version: 6.2.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: all
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Apr 30, 2025
    Configuration menu
    Copy the full SHA
    cbe9964 View commit details
    Browse the repository at this point in the history

Commits on May 7, 2025

  1. update JSON creation to docker (#7454)

    Other docs use docker for sample commands. This update brings the creation of the universal json inline with other sample commands.
    dmeiser authored May 7, 2025
    Configuration menu
    Copy the full SHA
    e308619 View commit details
    Browse the repository at this point in the history
  2. update(deps): update OPA package to version 1.4.2 (#7460)

    * update opa package to version 1.4.2
    
    * fix - load queries using OPA v0
    
    * set v0 when creating a new parser
    
    ---------
    
    Co-authored-by: Artur Ribeiro <153724638+cx-artur-ribeiro@users.noreply.github.com>
    cx-rui-araujo and cx-artur-ribeiro authored May 7, 2025
    Configuration menu
    Copy the full SHA
    ddcda8d View commit details
    Browse the repository at this point in the history
  3. fix(query): fn for s3_bucket_allows_delete_action_from_all_principals…

    … query (#7455)
    
    * fix FN for S3 Bucket Allows Delete Action From All Principals
    
    * add more automations for actions *, s3:* and explanatory comments
    
    * improve rule naming to reflect correct implementation
    cx-artur-ribeiro authored May 7, 2025
    Configuration menu
    Copy the full SHA
    905f92c View commit details
    Browse the repository at this point in the history

Commits on May 12, 2025

  1. ci(deps): bump securego/gosec from 2.22.3 to 2.22.4 in the all group (#…

    …7463)
    
    Bumps the all group with 1 update: [securego/gosec](https://github.com/securego/gosec).
    
    
    Updates `securego/gosec` from 2.22.3 to 2.22.4
    - [Release notes](https://github.com/securego/gosec/releases)
    - [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml)
    - [Commits](securego/gosec@955a68d...6decf96)
    
    ---
    updated-dependencies:
    - dependency-name: securego/gosec
      dependency-version: 2.22.4
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: all
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored May 12, 2025
    Configuration menu
    Copy the full SHA
    622cc10 View commit details
    Browse the repository at this point in the history

Commits on May 13, 2025

  1. feat(resolver): kubernetes circular dependency is causing resource ex…

    …haustion (#7421)
    
    * stage
    
    * draft check for circular references
    
    * comment failing test and solve lint
    
    * remove stashed currentResolutionPath from previous resolved files allowing once resolutions
    
    * remove wrong comments and add no lint statement
    
    * fix TestResolver_Resolve_Ansible_Vars unit test
    
    * fix 2 tests on TestResolver_Resolve_With_ResolveReferences and 1 test on TestResolver_Resolve_Without_ResolveReferences (5/8)
    
    * fix all unit tests
    
    * add lint ignore
    
    * remove lint ignore
    
    * add Test_checkCircularReference tests
    
    * remove deprecated function ioutil.ReadFile
    
    * remove unnecessary comments
    
    * first json temporary solution and handleMap RefMedatada refactor
    
    * add resolution for json files
    
    * solve unit tests although they seem to be wrongly implementedgi
    
    * refactor code and solve unit tests
    
    * fix lint issues and e2e test
    
    * add e2e that compares the payload between json and yaml files
    
    * fix mixing want status and lint lll
    
    * add missing payloads
    
    * refactor payload, folder name and fix e2e
    
    * change comments on e2e
    
    * refactor names to be according to other files naming conventions
    
    * remove duplicated unit test
    
    * fix typo on e2e comment
    
    * remove resolved file at least once solution
    
    * update e2e 099 payload with new implemented code
    
    * update file and id from e2e payload
    
    * remove currentResolutionPath from TestResolver
    
    * revert addition of \n to test error output
    
    * add Clear mechanism on ResolvedFilesCache to force re-resolution of all files
    
    * add nolint gocyclo
    
    * check if the file can or cannot be cached during the for cycle
    
    ---------
    
    Co-authored-by: ArturRibeiro-CX <artur.ribeiro@checkmarx.com>
    Co-authored-by: ArturRibeiro-CX <153724638+cx-artur-ribeiro@users.noreply.github.com>
    3 people authored May 13, 2025
    Configuration menu
    Copy the full SHA
    ef44a59 View commit details
    Browse the repository at this point in the history

Commits on May 19, 2025

  1. fix(lint): update lint version (#7445)

    * update lint version to version 2.0.2
    
    * update deprecated ubuntu version from 20.04 to latest
    
    * update validate-prs.yaml action to fix warnings
    cx-artur-ribeiro authored May 19, 2025
    Configuration menu
    Copy the full SHA
    8ec0fa7 View commit details
    Browse the repository at this point in the history
  2. docs(queries): update queries catalog (#7462)

    Co-authored-by: cx-artur-ribeiro <153724638+cx-artur-ribeiro@users.noreply.github.com>
    Co-authored-by: Rui Araújo Gomes <110477212+cx-rui-araujo@users.noreply.github.com>
    3 people authored May 19, 2025
    Configuration menu
    Copy the full SHA
    8861a05 View commit details
    Browse the repository at this point in the history

Commits on May 20, 2025

  1. docs(kicsbot): preparing for release 2.1.8 (#7471)

    * docs(kicsbot): preparing for release 2.1.8
    
    * bump kics version to 2.1.8
    
    ---------
    
    Co-authored-by: cx-monica-casanova <109349080+cx-monica-casanova@users.noreply.github.com>
    Co-authored-by: Rui Araújo Gomes <110477212+cx-rui-araujo@users.noreply.github.com>
    3 people authored May 20, 2025
    Configuration menu
    Copy the full SHA
    bfe8ba0 View commit details
    Browse the repository at this point in the history
Loading