All pull requests

Pull requests

• fix(query): fixed FP on Template Path With No Corresponding Path Parameter query for OpenAPI

  #8186·blacksoxx opened Nov 10, 2026·

  ·
  1

• fix(query): fixed FP on Object Without Required Property (v3) query for OpenAPI

  #8185·blacksoxx opened Nov 10, 2026·

  ·
  2

• fix(query): fixed FP on Container Capabilities Unrestricted query for Docker Compose

  #8184·blacksoxx opened Nov 10, 2026·

  ·
  1

• fix(query): skip Aurora instances on RDS Multi-AZ Deployment Disabled (CloudFormation)

  #8181·cx-carlos-mello opened Nov 10, 2026·

  ·
  2

  

• fix(query): clearer message on Azure Instance Using Basic Authentication (ARM) when OS is unknown

  #8180·cx-carlos-mello opened Nov 10, 2026·

  ·
  2

  

• fix(query): ignore anonymous compose volumes in Volume Has Sensitive Host Directory

  #8170·Shanmukh-l33t opened Nov 6, 2026·

  ·
  1

• fix(query): skip stage_description requirement for v6 aws_api_gateway_deployment

  #8167·Shanmukh-l33t opened Nov 4, 2026·

  ·
  1

  2

• fix(query): make k8s network policy matchLabels targeting conjunctive

  #8166·Shanmukh-l33t opened Nov 4, 2026·

  ·
  1

• fix(query): apt-get missing flags query accepting -y inside package names

  #8154·protonnegativo opened Oct 25, 2026·

  ·
  1

• feat(engine): add Helm fixer, values overrides, and container image BoM export

  #8153·MabsIPCA opened Oct 25, 2026·

  ·

• fix(parser): update dockerfile parser fixing ARG and ENV vars resolution

  #8143·cx-artur-ribeiro opened Oct 15, 2026Contributor·

  ·
  2

  

• feat(report): add security-severity to SARIF rule properties

  #8141·flo-ldrr opened Oct 15, 2026·

  ·
  1

  1

• fix(query): updated "Vault Auditing Disabled" query to check for required log categories

  accuracyazureterraform
  #8136·cx-andre-pereira opened Sep 30, 2026Contributor·

  ·
  2

  

• fix(query): reframe EKS Cluster Encryption Disabled as customer managed KMS key check (terraform + cloudformation)

  #8133·bendudz opened Sep 24, 2026·

  ·
  1

• fix(query): remove incorrect Volume Mount With OS Directory Write Permissions queries (k8s + terraform)

  #8130·bendudz opened Sep 24, 2026·

  ·
  1

• fix(engine): prevent deadlock on excluded paths

  #8125·H1743322 opened Sep 16, 2026·

  ·
  1

  1

  

• fix(query): update PHP version checks to 8.5

  #8124·pb30 opened Sep 16, 2026·

  ·

• fix(query): fixs for a lot of cli query warnings when scanning 'assets' folder

  #8116·cx-andre-pereira opened Sep 8, 2026Contributor·

  ·
  2

• fix(query): avoid false positives on exec-form RUN in package manager queries

  #8104·trh-ds opened Aug 31, 2026·

  ·
  1

• Add support for KMS Key Policy resources

  #8096·wilsonge opened Jul 30, 2026·

  ·

• fix(query): skip Fargate local volumes in EFS transit encryption check

  #8083·alexchen-sys opened Jul 22, 2026·

  ·
  1

• fix(query): fix false positive in schema_required_property_undefined

  #8082·haroldb1 opened Jul 20, 2026·

  ·
  1

• fix(parser): kics-scan ignore-line/ignore-block misapplied in YAML files with resolved references

  #8080·theo-sardin opened Jul 10, 2026·

  ·
  1

• feat(query): add "RDS Deletion Protection Disabled" query for Terraform/AWS

  #8075·Muhammaduazir69 opened Jun 26, 2026·

  ·

• [StepSecurity] Apply security best practices

  #8072·stepsecurity-app[bot] opened Jun 16, 2026Bot·

  ·