diff --git a/checkov/secrets/runner.py b/checkov/secrets/runner.py index 86b3cf11e67..2d0fe8d61c7 100644 --- a/checkov/secrets/runner.py +++ b/checkov/secrets/runner.py @@ -73,7 +73,7 @@ } ENTROPY_CHECK_IDS = {'CKV_SECRET_6', 'CKV_SECRET_19', 'CKV_SECRET_80'} -GENERIC_PRIVATE_KEY_CHECK_IDS = {'CKV_SECRET_10', 'CKV_SECRET_13'} +GENERIC_PRIVATE_KEY_CHECK_IDS = {'CKV_SECRET_10', 'CKV_SECRET_13', 'CKV_SECRET_192'} CHECK_ID_TO_SECRET_TYPE = {v: k for k, v in SECRET_TYPE_TO_ID.items()} diff --git a/checkov/version.py b/checkov/version.py index 7120d86e16c..6560ee54e9f 100644 --- a/checkov/version.py +++ b/checkov/version.py @@ -1 +1 @@ -version = '3.2.205' +version = '3.2.206' diff --git a/kubernetes/requirements.txt b/kubernetes/requirements.txt index 09266aedee2..f1ecee775fc 100644 --- a/kubernetes/requirements.txt +++ b/kubernetes/requirements.txt @@ -1 +1 @@ -checkov==3.2.205 +checkov==3.2.206 diff --git a/tests/secrets/test_prioritise_secrets.py b/tests/secrets/test_prioritise_secrets.py index d0994c48347..77617d58725 100644 --- a/tests/secrets/test_prioritise_secrets.py +++ b/tests/secrets/test_prioritise_secrets.py @@ -20,6 +20,10 @@ def setUp(self): check_result={"result": CheckResult.FAILED}, code_block=[(1, 'baz')], file_path='qux', file_line_range=[1, 2], resource='resource', evaluations=None, check_class='CheckClass', file_abs_path='abs_path'), + 'key4': SecretsRecord(check_id='CKV_SECRET_192', check_name='foo', + check_result={"result": CheckResult.FAILED}, code_block=[(1, 'baz')], + file_path='qux', file_line_range=[1, 2], resource='resource', evaluations=None, + check_class='CheckClass', file_abs_path='abs_path'), } self.ENTROPY_CHECK_IDS = ENTROPY_CHECK_IDS self.GENERIC_PRIVATE_KEY_CHECK_IDS = GENERIC_PRIVATE_KEY_CHECK_IDS @@ -34,6 +38,11 @@ def test_generic_private_key_check_id_removed(self): self.assertTrue(result) self.assertNotIn('key2', self.secret_records) + def test_generic_private_key_check_id_192_removed(self): + result = Runner._prioritise_secrets(self.secret_records, 'key4', 'CKV_SECRET_18') + self.assertTrue(result) + self.assertNotIn('key4', self.secret_records) + def test_no_removal_entropy_check_id(self): result = Runner._prioritise_secrets(self.secret_records, 'key1', 'CKV_SECRET_6') self.assertFalse(result) @@ -44,6 +53,11 @@ def test_no_removal_generic_private_key_check_id(self): self.assertFalse(result) self.assertIn('key2', self.secret_records) + def test_no_removal_generic_private_key_check_id_192(self): + result = Runner._prioritise_secrets(self.secret_records, 'key4', 'CKV_SECRET_192') + self.assertFalse(result) + self.assertIn('key4', self.secret_records) + def test_no_removal_other_check_id(self): result = Runner._prioritise_secrets(self.secret_records, 'key3', 'CKV_SECRET_1000') self.assertFalse(result)