Issues

CKV_AZURE_59 false positive: Terraform check ignores public_network_access on azurerm_storage_account

checks

#7683

· wes-key opened

on Sep 14, 2026

Terraform: `tags` built with `merge()` are not resolved for a resource inside a `for_each` module (sometimes nondeterministically), causing false failures in tag checks

graph

#7680

· brgsstm opened

on Sep 9, 2026

`CKV_GCP_17` crashes on nested dynamic `default_key_specs`

crash

#7678

· dogmatic69 opened

on Sep 9, 2026

terraform_plan: false positives on resources removed from state via `removed` block ('forget' action)

#7675

· v3n7i opened

on Sep 9, 2026

Terraform graph: no edge to a module output when the module is expanded by count or for_each

#7674

· AlexKantor87 opened

on Sep 8, 2026

CKV_AZURE_27 false positive for azurerm_mssql_server_security_alert_policy with AzureRM provider v5.3.0

checks

#7670

· satz-b opened

on Sep 4, 2026

CKV_AWS_24, CKV_AWS_25 and CKV_AWS_260 silently skip a security group when FromPort resolves to a non-integer

#7669

· zfLQ2qx2 opened

on Sep 4, 2026

CKV2_K8S_6 passes pods that do not satisfy NetworkPolicy matchExpressions

#7668

· lokesh0186 opened

on Sep 4, 2026

False positive on CKV_DOCKER_7 when base image is a build ARG with a pinned default tag

checks

#7667

· benispeti opened

on Sep 3, 2026

Tag 3.3.10 and 3.3.11 have no release binaries

#7648

· aschleifer opened

on Aug 17, 2026

Baseline matches by resource address + check id only, ignoring the file -- cross-file collapse

skips

#7647

· yunusdim opened

on Aug 15, 2026

--output-file-path is treated as a directory for single-file output unlike multiple files or even single file suffixed with a comma.

outputs

#7645

· KaoKsn opened

on Aug 11, 2026

Navigation Menu

All issues

CKV_AZURE_59 false positive: Terraform check ignores public_network_access on azurerm_storage_account

Terraform: `tags` built with `merge()` are not resolved for a resource inside a `for_each` module (sometimes nondeterministically), causing false failures in tag checks

`CKV_GCP_17` crashes on nested dynamic `default_key_specs`

terraform_plan: false positives on resources removed from state via `removed` block ('forget' action)

Terraform graph: no edge to a module output when the module is expanded by count or for_each

CKV_AZURE_27 false positive for azurerm_mssql_server_security_alert_policy with AzureRM provider v5.3.0

CKV_AWS_24, CKV_AWS_25 and CKV_AWS_260 silently skip a security group when FromPort resolves to a non-integer

CKV2_K8S_6 passes pods that do not satisfy NetworkPolicy matchExpressions

False positive on CKV_DOCKER_7 when base image is a build ARG with a pinned default tag

Tag 3.3.10 and 3.3.11 have no release binaries

Baseline matches by resource address + check id only, ignoring the file -- cross-file collapse

--output-file-path is treated as a directory for single-file output unlike multiple files or even single file suffixed with a comma.

Search results