Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: Checkmarx/kics
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.1.10
Choose a base ref
...
head repository: Checkmarx/kics
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v2.1.11
Choose a head ref
  • 15 commits
  • 58 files changed
  • 8 contributors

Commits on Jun 4, 2025

  1. docs(kicsbot): preparing for release 2.1.10 (#7486)

    * docs(kicsbot): preparing for release 2.1.10
    
    * Update version to 2.1.10
    
    ---------
    
    Co-authored-by: cx-bruno-silva <73999905+cx-bruno-silva@users.noreply.github.com>
    kicsbot and cx-bruno-silva authored Jun 4, 2025
    Configuration menu
    Copy the full SHA
    7c5050d View commit details
    Browse the repository at this point in the history

Commits on Jun 13, 2025

  1. update(deps): fix vulnerabilities and upgrade to GOv1.24.4 (#7493)

    * fix vulnerabilities upgrade go
    
    * reduce min version
    cx-rui-araujo authored Jun 13, 2025
    Configuration menu
    Copy the full SHA
    0c8e6fd View commit details
    Browse the repository at this point in the history

Commits on Jun 25, 2025

  1. Configuration menu
    Copy the full SHA
    4be23c5 View commit details
    Browse the repository at this point in the history

Commits on Jun 30, 2025

  1. fix(query): support deprecated enable_https_traffic_only and https_tr…

    …affic_only_enabled fields (#7461)
    
    * rename deprecated enable_https_traffic_only to https_traffic_only_enabled
    
    * remove unused file_name variable from positive_expected_result.json
    
    * update query to check both deprecated field and new field
    
    * update function name and positive expected results lines
    
    * improve key expected and actual results
    
    * fix typo
    
    * revert change on remediation when the attribute is missing
    
    * add documentation to Auto Remediation feature and change remediation to the latest version
    
    * add newlines
    cx-artur-ribeiro authored Jun 30, 2025
    Configuration menu
    Copy the full SHA
    4f3ba23 View commit details
    Browse the repository at this point in the history
  2. docs(platforms): add documentation to Analyzer Blacklist for Unsuppor…

    …ted File Types (#7509)
    
    * add documentation to blacklist support
    
    * update documentation
    
    * Update these to this
    
    * update section title
    
    * update section title
    
    ---------
    
    Co-authored-by: cxMiguelSilva <100352574+cx-miguel-silva@users.noreply.github.com>
    cx-artur-ribeiro and cx-miguel-silva authored Jun 30, 2025
    Configuration menu
    Copy the full SHA
    1f78f5c View commit details
    Browse the repository at this point in the history
  3. fix Improving Volume Mount With OS Directory Write Permissions k8s qu…

    …ery (#7508)
    
    Co-authored-by: Miguel Silva <100352574+cx-miguel-silva@users.noreply.github.com>
    cx-artur-ribeiro and cx-miguel-silva authored Jun 30, 2025
    Configuration menu
    Copy the full SHA
    4c8d0c9 View commit details
    Browse the repository at this point in the history
  4. fix(query): fix fp for ecs_cluster_not_encrypted_at_rest (#7510)

    * fix(query): fix fp for ecs_cluster_not_encrypted_at_rest
    
    * trim test data file to focus on target case
    
    ---------
    
    Co-authored-by: Miguel Silva <100352574+cx-miguel-silva@users.noreply.github.com>
    cx-romeu-silva and cx-miguel-silva authored Jun 30, 2025
    Configuration menu
    Copy the full SHA
    d790b1a View commit details
    Browse the repository at this point in the history
  5. fix(query): fix fn in password and secrets Dockerfile ENV variable ca…

    …ses (#7503)
    
    * Added ne Passwords and Secrets query for Dockerfile ENV hardcoded password with omitted equals cases, and corresponding negative and positive test cases
    
    * Corrected Passwords and Secrets expected results
    
    ---------
    
    Co-authored-by: Artur Ribeiro <153724638+cx-artur-ribeiro@users.noreply.github.com>
    Co-authored-by: Miguel Silva <100352574+cx-miguel-silva@users.noreply.github.com>
    3 people authored Jun 30, 2025
    Configuration menu
    Copy the full SHA
    430c444 View commit details
    Browse the repository at this point in the history

Commits on Jul 1, 2025

  1. fix(query): fix fp for mssql_server_auditing_disabled (#7492)

    * fix(query): fix fp for mssql_server_auditing_disabled
    
    * add better tests and simplify into a single CxPolicy
    
    ---------
    
    Co-authored-by: Artur Ribeiro <153724638+cx-artur-ribeiro@users.noreply.github.com>
    Co-authored-by: Rui Araújo Gomes <110477212+cx-rui-araujo@users.noreply.github.com>
    Co-authored-by: Miguel Silva <100352574+cx-miguel-silva@users.noreply.github.com>
    4 people authored Jul 1, 2025
    Configuration menu
    Copy the full SHA
    190103a View commit details
    Browse the repository at this point in the history
  2. fix(query): fix fp for iam_group_without_users (#7502)

    * fix(query): fix fp for iam_group_without_users
    
    * rename variable to avoid naming collision
    
    ---------
    
    Co-authored-by: Miguel Silva <100352574+cx-miguel-silva@users.noreply.github.com>
    cx-romeu-silva and cx-miguel-silva authored Jul 1, 2025
    Configuration menu
    Copy the full SHA
    27a520d View commit details
    Browse the repository at this point in the history
  3. fix(query): fix fn for iam_policy_grants_full_permissions (#7500)

    * fix(query): FN for iam_policy_grants_full_permissions
    
    * remove resource dependency from data policy
    
    * replace deleted variable with value
    
    ---------
    
    Co-authored-by: Miguel Silva <100352574+cx-miguel-silva@users.noreply.github.com>
    cx-romeu-silva and cx-miguel-silva authored Jul 1, 2025
    Configuration menu
    Copy the full SHA
    82e79fd View commit details
    Browse the repository at this point in the history
  4. fix(query): fix fp in password and secrets Generic Passwords (#7512)

    * add "Allow placeholders" and "Allow empty values" to Generic Passwords' allowRules
    
    * rename automation file to prevent merge conflicts
    cx-romeu-silva authored Jul 1, 2025
    Configuration menu
    Copy the full SHA
    a15cbf8 View commit details
    Browse the repository at this point in the history
  5. fix(query): fix fp in password and secrets Generic Private Key (#7514)

    * fix(query): fix fp for password and secrets - generic private key
    
    * move allowedRule to specific query
    
    * rename automation file to prevent merge conflicts
    
    ---------
    
    Co-authored-by: Miguel Silva <100352574+cx-miguel-silva@users.noreply.github.com>
    cx-romeu-silva and cx-miguel-silva authored Jul 1, 2025
    Configuration menu
    Copy the full SHA
    ca7abdc View commit details
    Browse the repository at this point in the history

Commits on Jul 7, 2025

  1. docs(queries): update queries catalog (#7507)

    Co-authored-by: cx-miguel-silva <100352574+cx-miguel-silva@users.noreply.github.com>
    kicsbot and cx-miguel-silva authored Jul 7, 2025
    Configuration menu
    Copy the full SHA
    6b04157 View commit details
    Browse the repository at this point in the history
  2. docs(kicsbot): preparing for release 2.1.11 (#7520)

    * docs(kicsbot): preparing for release 2.1.11
    
    * prepares for release of kics version 2.1.11
    
    ---------
    
    Co-authored-by: cx-monica-casanova <109349080+cx-monica-casanova@users.noreply.github.com>
    kicsbot and cx-monica-casanova authored Jul 7, 2025
    Configuration menu
    Copy the full SHA
    f3b8f85 View commit details
    Browse the repository at this point in the history
Loading