checkov · Issues· 168 open

CKV_AZURE_59 false positive: Terraform check ignores public_network_access on azurerm_storage_account

Checkov treats files outside of given path as rules and fails

Crash on unrecognized LOG_LEVEL environment variable (e.g. TRACE)

CKV_AWS_24, CKV_AWS_25 and CKV_AWS_260 silently skip a security group when FromPort resolves to a non-integer

Terraform: `tags` built with `merge()` are not resolved for a resource inside a `for_each` module (sometimes nondeterministically), causing false failures in tag checks

`CKV_GCP_17` crashes on nested dynamic `default_key_specs`

terraform_plan: false positives on resources removed from state via `removed` block ('forget' action)

Terraform graph: no edge to a module output when the module is expanded by count or for_each

Add UNKNOWNS to Checkov reports

CKV_AZURE_27 false positive for azurerm_mssql_server_security_alert_policy with AzureRM provider v5.3.0

CKV_AWS_45 false positives

CKV2_K8S_6 passes pods that do not satisfy NetworkPolicy matchExpressions

False positive on CKV_DOCKER_7 when base image is a build ARG with a pinned default tag

Bug: terraform_json parser crashes on CDKTF-generated cdk.tf.json with required_version

Guide URLs redirect to Cortex docs landing page