Checks index changelog

[chell0veck]

Hi team,

Great tool. We've onboarded that last year.

Now I would like to review new checks being added since then to see if we need those

Is there any easy way to do that?

Thank you.

[maxamel]

If you know which version you're using you can compare it with the current main and get an idea about what checks were added. Can you check if something like this might work:
git diff main tags/3.2.100 --name-only --diff-filter=A | grep "/checks/" | grep -v 'tests/'

[chell0veck]

If you know which version you're using you can compare it with the current main and get an idea about what checks were added. Can you check if something like this might work: git diff main tags/3.2.100 --name-only --diff-filter=A | grep "/checks/" | grep -v 'tests/'

Appreciate.

So basically
1.

checkov/gitlab/checks/two_factor_authentication.py
checkov/terraform/checks/resource/alicloud/OSSBucketPublic.py

2. checkov/gitlab/checks/two_factor_authentication.py - doesn't exists
3. checkov/terraform/checks/resource/alicloud/OSSBucketPublic.py - doesn't exist , but smth like checkov/terraform/checks/graph_checks/alicloud/OSSBucketPublic.yaml.
4. and from yaml take the check id: CKV_ALI_1.

Two questions:

1. Is it really only 1 check added from 3.2.235 to 3.2.471.
2. Is there some better way to check this.

Thank you.

[maxamel]

The files listed do not exist because they appeared in the compared branch, but were removed from main at some point.
I think the comparison needs to be reversed, like this:
git diff tags/3.2.100 main --name-only --diff-filter=A | grep "/checks/" | grep -v 'tests/'
Sadly, I'm not aware of a better way to do this, only look at the git data.