You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the issue
I am testing a fail scenario to validate the CKV_AWS_260 rule, but the rule is incorrectly passing instead of detecting a violation.
Examples
Please review the sample code below.
<resource "aws_security_group" "fail_test" {
name = "fail_test_sg"
description = "Security group with ingress from 0.0.0.0/0 to port 80"
ingress {
from_port = 80
to_port = 80
portocol = "tcp"
cidr_blocks = ["0.0.0.0/0"]
}
egress {
from_port = 0
to_port = 0
protocol = -1
cidr_blocks = ["0.0.0.0/0"]
}
}
Version (please complete the following information):
Checkov Version [3.2.469]
Additional context
I am using the Checkov Python library and passing arguments to validate the rules. While it works correctly with the existing rules, it fails to detect violations for newly added rules.