chore(deps): update dependency checkov to v3.2.352

[renovate]

This PR contains the following updates:

Package	Update	Change	OpenSSF
checkov	patch	==3.2.286 -> ==3.2.352

---

Release Notes

bridgecrewio/checkov (checkov)

v3.2.352

Feature

• terraform: add option to add external_modules_content_cache to terraform build_graph - #​6942

v3.2.351

Bug Fix

• terraform: Skip tsconfig in terraform plan - #​6941

v3.2.350

Feature

• terraform: add CKV_AZURE_248 - Azure batch account network access restriction - #​6928

Bug Fix

• terraform: Revert feat(terraform): Add a terraform block check (#​6904) - #​6937

v3.2.349

v3.2.348

v3.2.347

Compare Source

Feature

• general: Change behavior where if a config file is missing, run the scan as if there was no config file - #​6926

Bug Fix

• terraform: Fix for multiple checks - #​6933

v3.2.346

Compare Source

Feature

• terraform: add option to add proxy to request - #​6923

v3.2.345

Compare Source

Feature

• cloudformation: Add sensitive param check - #​6921
• terraform: add option to add proxy to request - #​6916
• terraform: check cognitive services restrict outbound network - #​6919

Bug Fix

• terraform_json: support CDKTF output in CKV_TF_3 - #​6918

v3.2.344

Compare Source

Bug Fix

• kubernetes: Add to nested resources on k8s graph inherit namespace - #​6912

v3.2.343

Compare Source

v3.2.342

Compare Source

Feature

• serverless: serverless definitions context - #​6910
• serverless: Serverless graph integration - #​6911
• terraform: Add a terraform block check - #​6904

v3.2.341

Compare Source

v3.2.340

Compare Source

v3.2.339

Compare Source

Bug Fix

• general: Fix jsonpath-key handling for special characters like "/" and reduce log size - #​6907
• serverless: Fix serverless check crash - #​6909

v3.2.337

Compare Source

v3.2.336

Compare Source

Feature

• general: add cortex:skip for suppressions - #​6908

Bug Fix

• terraform: fix CKV_AZURE_136 for replicas - #​6895
• terraform: Fix CKV_AZURE_227 for Azure V4 - #​6906

v3.2.335

Compare Source

v3.2.334

Compare Source

Feature

• serverless: Serverless graph vertices - #​6894

Bug Fix

• secrets: fix indentation to remove duplications - #​6626

v3.2.333

Compare Source

v3.2.332

Compare Source

Feature

• terraform: Add multi skip inline suppression - #​6860
• terraform: New bedrock check - #​6892

Bug Fix

• kubernetes: fix json file parsing - #​6891
• terraform: Fix CKV2_AZURE_31 - #​6893

v3.2.331

Compare Source

v3.2.330

Compare Source

v3.2.329

Compare Source

v3.2.328

Compare Source

Feature

• serverless: Serverless refactor for graph implementation - #​6885

Documentation

• general: docs flags update - #​6888

v3.2.327

Compare Source

Bug Fix

• terraform: Convert to graph check - #​6875

v3.2.326

Compare Source

Feature

• general: add new CIDR operator - #​6877

Bug Fix

• arm: Fix resource ID generation to use variables - #​6884

v3.2.325

Compare Source

v3.2.324

Compare Source

Bug Fix

• terraform_plan: run post_runner after get_enriched_resources for terraform_plan - #​6883

v3.2.322

Compare Source

Feature

• general: Update range includes to handle range values - #​6867

Bug Fix

• general: fix_memory error with adding new env - #​6879
• general: revert comment out ARM test - #​6882

v3.2.321

Compare Source

v3.2.320

Compare Source

Feature

• terraform: Add new checks to match run checks - #​6868

Bug Fix

• arm: Fix arm root folder - #​6880
• terraform: Update CKV_AZURE_164 to correct check on trust policy - #​6757

v3.2.319

Compare Source

v3.2.318

Compare Source

v3.2.317

Compare Source

Feature

• terraform: support resource_type attribute - #​6872

Bug Fix

• arm: Fix arm report resource naming - #​6876
• terraform: Fix two checks and logs - #​6874

v3.2.316

Compare Source

v3.2.315

Compare Source

v3.2.314

Compare Source

Feature

• general: add logs for suppression - #​6873

Bug Fix

• arm: Fix arm resource naming on integration with Prisma - #​6870

v3.2.313

Compare Source

v3.2.312

Compare Source

Bug Fix

• arm: Fix arm graph breadcrumbs - #​6869

v3.2.311

Compare Source

Bug Fix

• cloudformation: Fixed issue where Ref was not rendered correctly if the parameter name was identical to the default value - #​6856
• secrets: fix find line - #​6864
• secrets: masking test format - #​6859
• secrets: multiline matches show the secret and not the first line - #​6854

v3.2.310

Compare Source

v3.2.309

Compare Source

v3.2.308

Compare Source

v3.2.307

Compare Source

Bug Fix

• arm: Change ARM graph creation log lvl to debug - #​6857

v3.2.306

Compare Source

v3.2.305

Compare Source

Feature

• sca: support java full dependency tree scan - #​6834
• terraform: Add check - ensure AWS CodeGuru resource contains CMK - #​6851

Bug Fix

• general: Used jsonpath to update vertex attributes - #​6852
• terraform: Update EKS supported versions - #​6826
• terraform: Update CKV_AZURE_171 to check automatic_upgrade_channel - #​6756

v3.2.304

Compare Source

v3.2.303

Compare Source

v3.2.302

Compare Source

v3.2.301

Compare Source

Bug Fix

• secrets: skip empty match - #​6849

v3.2.300

Compare Source

Feature

• azure: add new policies for Azure Synapse arm - #​6553
• helm: Made helm + kustomize use the Kubernetes graph registry - #​6847
• secrets: Adding check_id to EnrichedSecret class - #​6842
• secrets: Masking secrets files - #​6848

Bug Fix

• secrets: add prerun support for singleline - #​6846
• terraform: Update CKV_AZURE_167 to correct check on retention policy - #​6758

v3.2.299

Compare Source

v3.2.298

Compare Source

v3.2.297

Compare Source

v3.2.296

Compare Source

Feature

• cloudformation: Support Fn::Sub in cases of using a pseudo parameter - #​6835
• terraform: support resource_type attribute - revert - #​6843

Bug Fix

• terraform: CKV_GCP_32 (GoogleComputeBlockProjectSSH) Add other common enabling values - #​6663

v3.2.295

Compare Source

v3.2.294

Compare Source

v3.2.293

Compare Source

Feature

• terraform: support resource_type attribute - #​6830

Bug Fix

• general: fixed mypy issue - #​6838

v3.2.292

Compare Source

v3.2.291

Compare Source

Feature

• general: remove specific botocore version - #​6796

Bug Fix

• arm: fix ARM graph block types - #​6824
• dockerfile: Handle heredoc - #​6828
• sast: filter unsupported policies - #​6833

v3.2.290

Compare Source

v3.2.289

Compare Source

v3.2.288

Compare Source

v3.2.287

Compare Source

Bug Fix

• graph: fix internal checks loading when adding custom policies in cli - #​6819

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Integration Test Results - Manual Scans

0 tests   - 20   0 ✅  - 20   0s ⏱️ -8s
0 suites  -  1   0 💤 ± 0 
0 files    -  1   0 ❌ ± 0 

Results for commit a72fdbd. ± Comparison against base commit 408ab9f.

♻️ This comment has been updated with latest results.

[github-actions]

Test Results

0 tests   - 79   0 ✅  - 79   0s ⏱️ -1s
0 suites  -  1   0 💤 ± 0 
0 files    -  1   0 ❌ ± 0 

Results for commit a72fdbd. ± Comparison against base commit 408ab9f.

♻️ This comment has been updated with latest results.