All pull requests

Pull requests

• fix(actions): standardize kicsbot automation branch names under feature/kicsbot-*

  #8129·cx-lior-poterman opened Sep 23, 2026·

  ·
  1

  

• docs(contributing): fix wrong E2E fixture path and typos across docs

  #8127·toyeshhm opened Sep 20, 2026·

  ·
  1

  

• fix(engine): prevent deadlock on excluded paths

  #8125·H1743322 opened Sep 16, 2026·

  ·
  1

• fix(query): update PHP version checks to 8.5

  #8124·pb30 opened Sep 16, 2026·

  ·

• fix(query): improve "last user is root" dockerfile query coverage

  #8123·cx-andre-pereira opened Sep 15, 2026·

  ·
  

• fix(detector): fix data race in dockerfile line detection for multiple dockerfiles projects

  #8121·cx-artur-ribeiro opened Sep 15, 2026·

  ·
  1

  

• fix(queries): correct mismatched expected/actual values across 22 queries

  workflows-approved
  #8120·cx-artur-ribeiro opened Sep 14, 2026·

  ·
  5

  

• fix(query): various fixes for passwords and secrets queries

  #8117·cx-andre-pereira opened Sep 8, 2026·

  ·
  1

• fix(query): fixs for a lot of cli query warnings when scanning 'assets' folder

  #8116·cx-andre-pereira opened Sep 8, 2026·

  ·
  2

• fix(query): avoid false positives on exec-form RUN in package manager queries

  #8104·trh-ds opened Aug 31, 2026·

  ·
  1

• Add support for KMS Key Policy resources

  #8096·wilsonge opened Jul 30, 2026·

  ·

• fix(query): skip Fargate local volumes in EFS transit encryption check

  #8083·alexchen-sys opened Jul 22, 2026·

  ·
  1

• fix(query): fix false positive in schema_required_property_undefined

  #8082·haroldb1 opened Jul 20, 2026·

  ·
  1

• fix(parser): kics-scan ignore-line/ignore-block misapplied in YAML files with resolved references

  #8080·theo-sardin opened Jul 10, 2026·

  ·
  1

• feat(query): add "RDS Deletion Protection Disabled" query for Terraform/AWS

  #8075·Muhammaduazir69 opened Jun 26, 2026·

  ·

• [StepSecurity] Apply security best practices

  #8072·stepsecurity-app[bot] opened Jun 16, 2026·

  ·

• fix(query): handle list-form access_logs in ELBv2 LB Access Log Disabled

  #8068·arpitjain099 opened Jun 4, 2026·

  ·
  1

• fix(cloudformation): scope KMS key rotation check to symmetric keys

  #8067·arpitjain099 opened Jun 4, 2026·

  ·
  1

• fix(azure): accept cilium as a valid AKS network_policy

  #8066·arpitjain099 opened Jun 4, 2026·

  ·
  1

• fix(query): exclude private CIDRs from AWS small-public-network query

  #8065·arpitjain099 opened Jun 3, 2026·

  ·
  1

• fix(dockerfile): flag unpinned dnf packages followed by a flag

  #8064·arpitjain099 opened Jun 3, 2026·

  ·
  1

• feat(report): add level field to SARIF result output

  #8037·rasta-rocket opened Apr 17, 2026·

  ·

• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4

  dependenciesgo
  #8026·dependabot[bot] opened Apr 3, 2026·

  ·

• ci(deps): bump the all group across 1 directory with 20 updates

  dependenciesgithub_actions
  #8025·dependabot[bot] opened Apr 2, 2026·

  ·

• feat(query): add OIDC trust policy misconfiguration queries for AWS IAM

  #8023·cx-antero-silva opened Apr 1, 2026·

  ·
  1