Skip to content

build(deps): bump checkov from 3.3.22 to 3.3.24 in /aws-cli - #1106

Merged
thomasleplus merged 2 commits into
mainfrom
dependabot/pip/aws-cli/checkov-3.3.24
Oct 14, 2026
Merged

thomasleplus merged 2 commits into
mainfrom
dependabot/pip/aws-cli/checkov-3.3.24

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor

Bumps checkov from 3.3.22 to 3.3.24.

Release notes

Sourced from checkov's releases.

3.3.23

Bug Fix

  • sca: apply --skip-path regex and hidden-dir filtering to sca_package - #7712
Commits
  • 3cc02fa Merge b4fd36e2ff3788c8f0cf0e03ea0a7362d9ff61cd into 768bcb47c661729d557520623...
  • 768bcb4 fix(kustomize): fix file path logic (#7720)
  • bd0f0ec chore: update release notes
  • 06b86ed fix(sca): apply --skip-path regex and hidden-dir filtering to sca_package (#7...
  • e7d3dd9 fix(sca): apply --skip-path regex and hidden-dir filtering to sca_package (#7...
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [checkov](https://github.com/bridgecrewio/checkov) from 3.3.22 to 3.3.24.
- [Release notes](https://github.com/bridgecrewio/checkov/releases)
- [Changelog](https://github.com/bridgecrewio/checkov/blob/main/CHANGELOG.md)
- [Commits](bridgecrewio/checkov@3.3.22...3.3.24)

---
updated-dependencies:
- dependency-name: checkov
  dependency-version: 3.3.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 13, 2026
@github-actions github-actions Bot added the build [Conventional Commits] Changes that affect the build system or external dependencies label Oct 13, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
pip/checkov 3.3.24 🟢 7
Details
CheckScoreReason
Maintained🟢 1030 commit(s) out of 30 and 7 issue activity out of 30 found in the last 90 days -- score normalized to 10
Code-Review🟢 311 out of last 30 changesets reviewed before merge -- score normalized to 3
Vulnerabilities🟢 10no vulnerabilities detected
CII-Best-Practices⚠️ 2badge detected: in_progress
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
Token-Permissions⚠️ 0non read-only tokens detected in GitHub workflows
Security-Policy🟢 10security policy file detected
License🟢 10license file detected
Dependency-Update-Tool🟢 10update tool detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits
Binary-Artifacts🟢 10no binaries found in the repo
Packaging🟢 10publishing workflow detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0

Scanned Files

  • aws-cli/requirements.txt

@github-actions
github-actions Bot enabled auto-merge (squash) October 13, 2026 14:34
@thomasleplus
thomasleplus merged commit cedf81e into main Oct 14, 2026
44 checks passed
@thomasleplus
thomasleplus deleted the dependabot/pip/aws-cli/checkov-3.3.24 branch October 14, 2026 06:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

build [Conventional Commits] Changes that affect the build system or external dependencies dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant