Tags: bridgecrewio/checkov

fix(general): honour scope.provider for platform-downloaded custom po… (

#7677)

fix(general): honour scope.provider for platform-downloaded custom policies

Co-authored-by: mblonder <[email protected]>

fix(terraform): Added current Azure Terraform resources and taggable …

…resources as of hashicorp/azurerm provider version 4.81 (#7652)

* Added current Azure Terraform resources as of provider version 4.81

* Fixed copy/past issues with azure resource types

---------

Co-authored-by: Joshua Brule <[email protected]>

fix(sca): match CVE suppressions case-insensitively (#7659)

* fix(sca): match CVE suppressions case-insensitively

* chore(ci): pin pipenv on all python versions

* chore(ci): pin pipenv and bump danger-check to node 20

fix(sca): match CVE suppressions case-insensitively (#7659)

* fix(sca): match CVE suppressions case-insensitively

* chore(ci): pin pipenv on all python versions

* chore(ci): pin pipenv and bump danger-check to node 20

chore: update release notes

fix(sca): correct Windows path handling in image referencer (#7650)

* fix(sca): correct Windows path handling in image referencer rootless paths

* fix(sca): align platform image paths to forward slashes on Windows

* fix(sca): apply Windows path handling only on Windows

* test(sca): drop version-dependent path case from rootless path test

* chore(secrets): bump detect-secrets to 1.5.50

chore(secrets): bump detect-secrets to 1.5.49 (#7646)

bump detect-secrets to 1.5.49

chore(general): allow aiohttp 3.14.x (#7642)

chore(deps): allow aiohttp 3.14.x

fix(terraform): handle null container_properties in aws_batch_job_def… (

#7636)

fix(terraform): handle null container_properties in aws_batch_job_definition plan parsing

Terraform's compiled plan JSON sets unused schema attributes explicitly
to null rather than omitting them. When an aws_batch_job_definition
resource uses eks_properties instead of container_properties, the plan
JSON still contains container_properties: null, which caused jsonify()
to call json.loads(None) and raise an unhandled TypeError, crashing the
scan.

Guard against falsy/None values before calling json.loads, and catch
TypeError defensively in addition to JSONDecodeError.

Fixes #7587

Merge branch 'main' into fix-ckv-k8s-40-hostusers