3.2.364

Bug Fix

• terraform: CKV_AWS_339 - Add EKS platform version 1.32 to allowed lists of versions - #6988

3.2.362

Bug Fix

• secrets: Multiple matching groups are being caught as regex separated by | sign - #6967
• secrets: Remove both random and base64 entropy secrets finding - #6969

Platform

• general: Backfill more eval keys - #6970

3.2.358

Feature

• general: Add env var for policy metadata - #6979

3.2.357

Feature

• general: initial support for python 3.13 - #6962

Bug Fix

• terraform: OIDC checks fixes - #6964

3.2.355

Feature

• terraform: Update CKV_AWS_358, add CKV_GCP_125 and CKV_AZURE_249 for OIDC claims analysis for GitHub - #6960

Bug Fix

• terraform: Accept TLS 1.3 for Azure web apps and web app slots - #6956

Platform

• terraform: Add eval keys - #6929

3.2.353

Bug Fix

• general: Support CVE suppressions with the root file in repo - #6948

3.2.352

Feature

• terraform: add option to add external_modules_content_cache to terraform build_graph - #6942

3.2.351

Bug Fix

• terraform: Skip tsconfig in terraform plan - #6941

3.2.350

Feature

• terraform: add CKV_AZURE_248 - Azure batch account network access restriction - #6928

Bug Fix

• terraform: Revert feat(terraform): Add a terraform block check (#6904) - #6937

3.2.347

Feature

• general: Change behavior where if a config file is missing, run the scan as if there was no config file - #6926

Bug Fix

• terraform: Fix for multiple checks - #6933