All pull requests

Pull requests

• chore(deps): bump the github-actions group with 3 updates

  dependenciesgithub_actions
  #658·dependabot[bot] opened Nov 1, 2026Bot·

  ·

• fix(cloud): report rules whose CIDRs together cover all IP addresses

  #657·harshrajdebug opened Oct 30, 2026·

  ·
  1

  1

• ci: add actions lockfile

  #656·nikpivkin opened Oct 29, 2026Contributor·

  ·

• chore(deps): bump github.com/open-policy-agent/opa from 1.21.2 to 1.21.3 in the common group

  dependenciesgo
  #655·dependabot[bot] opened Oct 27, 2026Bot·

  ·

• fix(kubernetes): report the container at fault in KSV-0024, KSV-0119 and KSV-0120

  #654·arpitjain099 opened Oct 21, 2026Contributor·

  ·

• test: run k8s compliance scan against a kind cluster

  #650·nikpivkin opened Oct 16, 2026Contributor·

  ·

• fix(KSV-0004): require a non-empty capabilities.drop

  #649·nikpivkin opened Oct 15, 2026Contributor·

  ·

• fix(aws): check TLS policies against explicit allowlists

  #648·nikpivkin opened Oct 15, 2026Contributor·

  ·
  2

• chore(deps): bump github.com/moby/sys/user from 0.4.0 to 0.4.1

  dependenciesgo
  #645·dependabot[bot] opened Oct 12, 2026Bot·

  ·
  3

• fix(kubernetes): avoid shell self-matches in node audits

  #644·jtatum opened Oct 6, 2026·

  ·
  1

• Fix Docker ADD check for .tgz archives

  #643·ahsen24056ali opened Oct 5, 2026·

  ·
  2

• fix(aws): accept RFC9151/PQC TLS policies in AWS-0126

  #640·kokhlo opened Sep 29, 2026·

  ·
  1

• fix(elb): add missing FIPS/PQ ELB TLS policies to AWS-0047 outdated set

  #638·DearMoon50 opened Sep 22, 2026·

  ·
  1

• Recognize Azure Monitor storage logging

  #637·dvasdekis opened Sep 21, 2026·

  ·
  2

• feat(k8s): enable node CIS checks on k3s

  #636·steache opened Sep 18, 2026·

  ·
  1

• ci: check that go.mod is tidy

  #633·nikpivkin opened Sep 11, 2026Contributor·

  ·

• fix(aws-elb): add missing TLS 1.0/1.1 policies to the outdated set

  #627·kokhlo opened Sep 9, 2026·

  ·
  1

  1

• refactor(rego): iterate the shell AST with syntax.Preorder

  #624·nikpivkin opened Sep 8, 2026Contributor·

  ·
  1

• refactor(rego): move the result parsing from Trivy

  #623·nikpivkin opened Sep 8, 2026Contributor·

  ·

• fix(aws): correct ELB weak TLS policy detection

  #610·dev-rehaann opened Aug 25, 2026·

  ·
  2

• chore(deps): bump github.com/moby/go-archive from 0.2.0 to 0.3.0

  dependenciesgo
  #603·dependabot[bot] opened Aug 19, 2026Bot·

  ·
  5

• fix(AWS-0112): accept modern SAM API TLS policies

  #600·chiliec opened Aug 18, 2026Contributor·

  ·
  1

• fix(aws-0047): flag outdated FIPS/PQ ELB TLS policies

  #599·MsfPablo opened Aug 18, 2026·

  ·
  1

  1

• fix(aws-0126): match secure TLS policies by prefix

  #598·MsfPablo opened Aug 18, 2026·

  ·
  1

  1

• chore(deps): bump github.com/go-git/go-git/v5 from 5.16.3 to 5.19.2

  dependenciesgo
  #590·dependabot[bot] opened Aug 9, 2026Bot·

  ·
  2