All pull requests

Pull requests

• fix(parser): update dockerfile parser fixing ARG and ENV vars resolution

  #8143·cx-artur-ribeiro opened Oct 15, 2026Contributor·

  ·
  2

  

• feat(report): add security-severity to SARIF rule properties

  #8141·flo-ldrr opened Oct 15, 2026·

  ·
  1

• fix(query): updated "Vault Auditing Disabled" query to check for required log categories

  accuracyazureterraform
  #8136·cx-andre-pereira opened Sep 30, 2026Contributor·

  ·
  2

  

• fix(query): reframe EKS Cluster Encryption Disabled as customer managed KMS key check (terraform + cloudformation)

  #8133·bendudz opened Sep 24, 2026·

  ·
  1

• fix(query): remove incorrect Volume Mount With OS Directory Write Permissions queries (k8s + terraform)

  #8130·bendudz opened Sep 24, 2026·

  ·
  1

• fix(engine): prevent deadlock on excluded paths

  #8125·H1743322 opened Sep 16, 2026·

  ·
  1

  1

  

• fix(query): update PHP version checks to 8.5

  #8124·pb30 opened Sep 16, 2026·

  ·

• fix(query): fixs for a lot of cli query warnings when scanning 'assets' folder

  #8116·cx-andre-pereira opened Sep 8, 2026Contributor·

  ·
  2

• fix(query): avoid false positives on exec-form RUN in package manager queries

  #8104·trh-ds opened Aug 31, 2026·

  ·
  1

• Add support for KMS Key Policy resources

  #8096·wilsonge opened Jul 30, 2026·

  ·

• fix(query): skip Fargate local volumes in EFS transit encryption check

  #8083·alexchen-sys opened Jul 22, 2026·

  ·
  1

• fix(query): fix false positive in schema_required_property_undefined

  #8082·haroldb1 opened Jul 20, 2026·

  ·
  1

• fix(parser): kics-scan ignore-line/ignore-block misapplied in YAML files with resolved references

  #8080·theo-sardin opened Jul 10, 2026·

  ·
  1

• feat(query): add "RDS Deletion Protection Disabled" query for Terraform/AWS

  #8075·Muhammaduazir69 opened Jun 26, 2026·

  ·

• [StepSecurity] Apply security best practices

  #8072·stepsecurity-app[bot] opened Jun 16, 2026Bot·

  ·

• fix(query): handle list-form access_logs in ELBv2 LB Access Log Disabled

  #8068·arpitjain099 opened Jun 4, 2026·

  ·
  1

• fix(cloudformation): scope KMS key rotation check to symmetric keys

  #8067·arpitjain099 opened Jun 4, 2026·

  ·
  1

• fix(azure): accept cilium as a valid AKS network_policy

  #8066·arpitjain099 opened Jun 4, 2026·

  ·
  1

• fix(query): exclude private CIDRs from AWS small-public-network query

  #8065·arpitjain099 opened Jun 3, 2026·

  ·
  1

• fix(dockerfile): flag unpinned dnf packages followed by a flag

  #8064·arpitjain099 opened Jun 3, 2026·

  ·
  1

• feat(report): add level field to SARIF result output

  #8037·rasta-rocket opened Apr 17, 2026·

  ·

• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4

  dependenciesgo
  #8026·dependabot[bot] opened Apr 3, 2026Bot·

  ·

• ci(deps): bump the all group across 1 directory with 20 updates

  dependenciesgithub_actions
  #8025·dependabot[bot] opened Apr 2, 2026Bot·

  ·

• feat(query): add OIDC trust policy misconfiguration queries for AWS IAM

  #8023·cx-antero-silva opened Apr 1, 2026Contributor·

  ·
  1

  8

  

• build(deps): bump path-to-regexp from 0.1.12 to 0.1.13 in /.github/scripts/server-mock

  dependenciesjavascript
  #8022·dependabot[bot] opened Mar 30, 2026Bot·

  ·