Breaking Change

• general: Remove OpenAI - #7146

Bug Fix

• terraform_plan: use provider name not resource address to fix supported_provider matching - #7119

Bug Fix

• general: using asteval instead of using eval - #7116

Bug Fix

• terraform: Fix protocols for CKV2_AWS_74 and fix for CKV2_K8S_5 - #7134

Feature

• terraform: Add new check for overly permissive SQS policy - #7125

Bug Fix

• terraform: support CLI notation in CKV_AZURE_228 for EventHub locations - #7124

Feature

• secrets: Add support in git history for producer consumer - #7123

Bug Fix

• general: Make --download-external-modules Optional[bool] - #7121
• secrets: Fix test directory tree race - #7122
• terraform: add aws_elasticache_serverless_cache to CKV2_AWS_5 - #7079

Feature

• terraform: Over permissive Lambda Cors check (Terraform & Cloudformation) - #7113

Bug Fix

• general: base_runner: Properly escape excluded directories that begin with '.' - #7112

Feature

• terraform: Add new check and update old around cipher suites - #7108

Bug Fix

• kustomize: handle kustomize file with empty resources section - #7109

Bug Fix

• terraform: Fix for multiple checks - #7097