Issues

• linux-arm artifacts no longer being released as of 3.3.21

  bridgecrewio/checkov#7729 · Filter by author mjnagel opened on Oct 7, 2026

• CKV_GCP_4 false positive: google_compute_ssl_policy with FIPS_202205 profile fails (profile predates the check's whitelist)

  bridgecrewio/checkov#7728 · Filter by author tokiwong opened on Oct 6, 2026

• CKV_AWS_378 false positive: the listener -> target-group edge is lost when the target group uses count

  bridgecrewio/checkov#7727 · Filter by author xonaman opened on Oct 6, 2026

• sdist omits graph_checks YAML sources, so any sdist-based install silently runs zero graph checks

  bridgecrewio/checkov#7724 · Filter by author xonaman opened on Oct 6, 2026

• Add a check for GitHub flexible federated identity credentials missing an immutable repository claim

  bridgecrewio/checkov#7714 · Filter by author harshit3355 opened on Oct 3, 2026

• Terraform files with a newline after a unary operator are silently skipped (bc-python-hcl2 0.4.3 parse error)

  bridgecrewio/checkov#7713 · Filter by author hemzaz opened on Oct 3, 2026

• CKV_AWS_159 false positive for Athena managed query results with default AWS-owned encryption

  bridgecrewio/checkov#7700 · Filter by author Paul-Eccleston-i2 opened on Sep 24, 2026

• Bug: CKV2_K8S_5 misattributes RoleBinding→Role when Role names collide across namespaces (false positives + false negatives)

  checks
  bridgecrewio/checkov#7694 · Filter by author KeyboardShapedFace opened on Sep 22, 2026

• openapi runner hangs the scan on an unreadable file (PermissionError uncaught in parse_format)

  bridgecrewio/checkov#7693 · Filter by author rafaelpereyra opened on Sep 22, 2026
  3

• Rendering a dynamic block drops the static blocks of the same name

  bridgecrewio/checkov#7691 · Filter by author zfLQ2qx2 opened on Sep 20, 2026
  1

• CKV_AZURE_59 false positive: Terraform check ignores public_network_access on azurerm_storage_account

  checks
  bridgecrewio/checkov#7683 · Filter by author wes-key opened on Sep 14, 2026

• Terraform: tags built with merge() are not resolved for a resource inside a for_each module (sometimes nondeterministically), causing false failures in tag checks

  graph
  bridgecrewio/checkov#7680 · Filter by author brgsstm opened on Sep 9, 2026
  2

• CKV_GCP_17 crashes on nested dynamic default_key_specs

  crash
  bridgecrewio/checkov#7678 · Filter by author dogmatic69 opened on Sep 9, 2026

• Terraform graph: no edge to a module output when the module is expanded by count or for_each

  bridgecrewio/checkov#7674 · Filter by author AlexKantor87 opened on Sep 8, 2026

• CKV_AZURE_27 false positive for azurerm_mssql_server_security_alert_policy with AzureRM provider v5.3.0

  checks
  bridgecrewio/checkov#7670 · Filter by author satz-b opened on Sep 4, 2026

• CKV_AWS_24, CKV_AWS_25 and CKV_AWS_260 silently skip a security group when FromPort resolves to a non-integer

  bridgecrewio/checkov#7669 · Filter by author zfLQ2qx2 opened on Sep 4, 2026
  1

• CKV2_K8S_6 passes pods that do not satisfy NetworkPolicy matchExpressions

  bridgecrewio/checkov#7668 · Filter by author lokesh0186 opened on Sep 4, 2026

• False positive on CKV_DOCKER_7 when base image is a build ARG with a pinned default tag

  checks
  bridgecrewio/checkov#7667 · Filter by author benispeti opened on Sep 3, 2026
  1

• Tag 3.3.10 and 3.3.11 have no release binaries

  bridgecrewio/checkov#7648 · Filter by author aschleifer opened on Aug 17, 2026

• Baseline matches by resource address + check id only, ignoring the file -- cross-file collapse

  skips
  bridgecrewio/checkov#7647 · Filter by author yunusdim opened on Aug 15, 2026

• --output-file-path is treated as a directory for single-file output unlike multiple files or even single file suffixed with a comma.

  outputs
  bridgecrewio/checkov#7645 · Filter by author KaoKsn opened on Aug 11, 2026
  1

• Inline checkov:skip comments are ignored when --deep-analysis is enabled

  bridgecrewio/checkov#7643 · Filter by author pszypowicz opened on Aug 11, 2026

• ARM Framework issue in Checkov (Azure Devops)

  crash
  bridgecrewio/checkov#7633 · Filter by author prabhusirpi opened on Jul 30, 2026

• Guide URLs redirect to Cortex docs landing page

  bridgecrewio/checkov#7631 · Filter by author francsw opened on Jul 29, 2026
  5

• GCP Taggable Resources Missing

  checks
  bridgecrewio/checkov#7629 · Filter by author jgpstuart opened on Jul 29, 2026
  1