@codacy/tools-checkov-3 0.6.2 → 0.8.0

package/dist/index.js

@@ -157,7 +157,8 @@ var patterns_default = [
     title: "Ensure Auto Scaling Groups Associated with Load Balancers Use Elastic Load Balancing Health Checks",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV2_AWS_16",
@@ -166,7 +167,8 @@ var patterns_default = [
     title: "Ensure Auto Scaling is Enabled on DynamoDB Tables",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV2_AWS_18",
@@ -229,7 +231,8 @@ var patterns_default = [
     title: "Ensure Route53 A Record Has Attached Resource",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV2_AWS_27",
@@ -553,7 +556,8 @@ var patterns_default = [
     title: "Ensure Dedicated Master Node is Enabled for ElasticSearch/OpenSearch",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV2_AWS_6",
@@ -571,7 +575,8 @@ var patterns_default = [
     title: "Ensure RDS Instance Has Copy Tags to Snapshots Enabled",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV2_AWS_61",
@@ -580,7 +585,8 @@ var patterns_default = [
     title: "Ensure S3 Bucket Has Lifecycle Configuration",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV2_AWS_62",
@@ -850,7 +856,8 @@ var patterns_default = [
     title: "Ensure Vulnerability Assessment is Enabled on SQL Server by Setting a Storage Account",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV2_AZURE_20",
@@ -1453,7 +1460,8 @@ var patterns_default = [
     title: "Ensure PostgreSQL Database Flag 'log_duration' Is Set to 'on'",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["gcp"]
   },
   {
     id: "Checkov_CKV2_GCP_14",
@@ -1471,7 +1479,8 @@ var patterns_default = [
     title: "Ensure PostgreSQL Database Flag 'log_parser_stats' Is Set to 'off'",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["gcp"]
   },
   {
     id: "Checkov_CKV2_GCP_16",
@@ -1480,7 +1489,8 @@ var patterns_default = [
     title: "Ensure PostgreSQL Database Flag 'log_planner_stats' Is Set to 'off'",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["googlecloudplatform"]
   },
   {
     id: "Checkov_CKV2_GCP_17",
@@ -1489,7 +1499,8 @@ var patterns_default = [
     title: "Ensure PostgreSQL Database Flag 'log_statement_stats' Is Set to 'off'",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["gcp"]
   },
   {
     id: "Checkov_CKV2_GCP_18",
@@ -1615,7 +1626,8 @@ var patterns_default = [
     title: "Ensure Only GCP-Managed Service Account Keys Are Used",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["ai", "ai-risk", "ai-safety"]
   },
   {
     id: "Checkov_CKV2_GCP_30",
@@ -1669,7 +1681,8 @@ var patterns_default = [
     title: "Ensure Vertex AI Runtime Encryption with Customer Managed Key (CMK)",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["ai", "ai-risk", "ai-safety"]
   },
   {
     id: "Checkov_CKV2_GCP_36",
@@ -1678,7 +1691,8 @@ var patterns_default = [
     title: "Ensure Vertex AI Runtime is Private",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["ai", "ai-risk", "ai-safety"]
   },
   {
     id: "Checkov_CKV2_GCP_37",
@@ -1957,7 +1971,8 @@ var patterns_default = [
     title: "Ensure OSS Bucket Has Transfer Acceleration Enabled",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["alibabacloud", "oss"]
   },
   {
     id: "Checkov_CKV_ALI_12",
@@ -2155,7 +2170,8 @@ var patterns_default = [
     title: "Ensure Kubernetes Node Pools Are Set to Auto Repair",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["alibabacloud", "kubernetes"]
   },
   {
     id: "Checkov_CKV_ALI_32",
@@ -2182,7 +2198,8 @@ var patterns_default = [
     title: "Ensure RDS Instance Has log_duration Enabled",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["alibabacloud", "rds"]
   },
   {
     id: "Checkov_CKV_ALI_36",
@@ -2542,7 +2559,8 @@ var patterns_default = [
     title: "Ensure AWS Lambda Function Has Function-Level Concurrent Execution Limit Configured",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws", "lambda"]
   },
   {
     id: "Checkov_CKV_AWS_116",
@@ -2551,7 +2569,8 @@ var patterns_default = [
     title: "Ensure AWS Lambda Function is Configured with a Dead Letter Queue (DLQ)",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_117",
@@ -2596,7 +2615,8 @@ var patterns_default = [
     title: "Ensure API Gateway Caching Is Enabled",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_121",
@@ -2641,7 +2661,8 @@ var patterns_default = [
     title: "Ensure Detailed Monitoring is Enabled for EC2 Instances",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_127",
@@ -2713,7 +2734,8 @@ var patterns_default = [
     title: "Ensure EC2 Instances Are EBS Optimized",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_136",
@@ -2740,7 +2762,8 @@ var patterns_default = [
     title: "Ensure ELB Cross-Zone Load Balancing Is Enabled",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_139",
@@ -2875,7 +2898,8 @@ var patterns_default = [
     title: "Ensure Load Balancer Has Cross-Zone Load Balancing Enabled",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_153",
@@ -2884,7 +2908,8 @@ var patterns_default = [
     title: "Enforce Tags on Autoscaling Group Launch Configurations",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_154",
@@ -3262,7 +3287,8 @@ var patterns_default = [
     title: "Ensure WAF Prevents Message Lookup in Log4j2",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["cve"]
   },
   {
     id: "Checkov_CKV_AWS_193",
@@ -3505,7 +3531,8 @@ var patterns_default = [
     title: "Ensure CloudFront Distribution Is Enabled",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_217",
@@ -3514,7 +3541,8 @@ var patterns_default = [
     title: "Ensure Create Before Destroy for API Deployments",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_218",
@@ -3595,7 +3623,8 @@ var patterns_default = [
     title: "Ensure API Gateway Method Setting Caching is Enabled",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_226",
@@ -3676,7 +3705,8 @@ var patterns_default = [
     title: "Ensure Create Before Destroy for ACM Certificates",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_234",
@@ -3712,7 +3742,8 @@ var patterns_default = [
     title: "Ensure Create Before Destroy for API Gateway",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_238",
@@ -3955,7 +3986,8 @@ var patterns_default = [
     title: "Ensure HTTP/HTTPS Target Group Defines Healthcheck",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_262",
@@ -4342,7 +4374,8 @@ var patterns_default = [
     title: "Ensure S3 Lifecycle Configuration Sets Period for Aborting Failed Uploads",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_301",
@@ -4387,7 +4420,8 @@ var patterns_default = [
     title: "Ensure CloudFront Distribution Has a Default Root Object Configured",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_306",
@@ -4441,7 +4475,8 @@ var patterns_default = [
     title: "Ensure CloudFront Distributions Have Origin Failover Configured",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_311",
@@ -4468,7 +4503,8 @@ var patterns_default = [
     title: "Ensure RDS Cluster Copies Tags to Snapshots",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_314",
@@ -4486,7 +4522,8 @@ var patterns_default = [
     title: "Ensure EC2 Auto Scaling Groups Use EC2 Launch Templates",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_316",
@@ -4513,7 +4550,8 @@ var patterns_default = [
     title: "Ensure Elasticsearch domains have at least three dedicated master nodes for high availability",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_319",
@@ -4594,7 +4632,8 @@ var patterns_default = [
     title: "Ensure RDS Aurora Clusters Have Backtracking Enabled",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_327",
@@ -4864,7 +4903,8 @@ var patterns_default = [
     title: "Ensure RDS Instances Have Performance Insights Enabled",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_354",
@@ -4954,7 +4994,8 @@ var patterns_default = [
     title: "Enforce Neptune DB Clusters to Copy Tags to Snapshots",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_363",
@@ -5503,7 +5544,8 @@ var patterns_default = [
     title: "Ensure CloudWatch Log Group Specifies Retention Days",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["aws"]
   },
   {
     id: "Checkov_CKV_AWS_67",
@@ -5881,7 +5923,8 @@ var patterns_default = [
     title: "Ensure Azure Data Factory Uses Git Repository for Source Control",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_104",
@@ -6178,7 +6221,8 @@ var patterns_default = [
     title: "Ensure Front Door WAF Prevents Message Lookup in Log4j2",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["cve"]
   },
   {
     id: "Checkov_CKV_AZURE_134",
@@ -6196,7 +6240,8 @@ var patterns_default = [
     title: "Ensure Application Gateway WAF Prevents Message Lookup in Log4j2",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["cve"]
   },
   {
     id: "Checkov_CKV_AZURE_136",
@@ -6205,7 +6250,8 @@ var patterns_default = [
     title: "Ensure PostgreSQL Flexible Server Enables Geo-Redundant Backups",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure", "postgresql"]
   },
   {
     id: "Checkov_CKV_AZURE_137",
@@ -6268,7 +6314,8 @@ var patterns_default = [
     title: "Ensure Machine Learning Compute Cluster Local Authentication is Disabled",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["ai", "ai-risk", "ai-safety"]
   },
   {
     id: "Checkov_CKV_AZURE_143",
@@ -6286,7 +6333,8 @@ var patterns_default = [
     title: "Ensure Public Access is Disabled for Azure Machine Learning Workspace",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["ai", "ai-risk", "ai-safety"]
   },
   {
     id: "Checkov_CKV_AZURE_145",
@@ -6349,7 +6397,8 @@ var patterns_default = [
     title: "Ensure Machine Learning Compute Cluster Minimum Nodes Set To 0",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_151",
@@ -6493,7 +6542,8 @@ var patterns_default = [
     title: "Ensure Geo-Replicated Container Registries for Multi-Region Deployments",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_166",
@@ -6511,7 +6561,8 @@ var patterns_default = [
     title: "Ensure Retention Policy Is Set to Cleanup Untagged Manifests",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_168",
@@ -6520,7 +6571,8 @@ var patterns_default = [
     title: "Enforce Minimum Pod Count of 50 on Azure Kubernetes Cluster Nodes",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure", "kubernetes", "aks"]
   },
   {
     id: "Checkov_CKV_AZURE_169",
@@ -6529,7 +6581,8 @@ var patterns_default = [
     title: "Ensure Azure Kubernetes Cluster (AKS) Nodes Use Scale Sets",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure", "kubernetes", "aks"]
   },
   {
     id: "Checkov_CKV_AZURE_17",
@@ -6547,7 +6600,8 @@ var patterns_default = [
     title: "Ensure AKS Uses the Paid SKU for SLA",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_171",
@@ -6556,7 +6610,8 @@ var patterns_default = [
     title: "Ensure AKS Cluster Upgrade Channel Is Chosen",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_172",
@@ -6592,7 +6647,8 @@ var patterns_default = [
     title: "Ensure Web PubSub Uses a SKU with an SLA",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_176",
@@ -6646,7 +6702,8 @@ var patterns_default = [
     title: "Ensure Data Explorer Uses SKU with SLA",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_181",
@@ -6736,7 +6793,8 @@ var patterns_default = [
     title: "Enforce Selection of Standard Pricing Tier",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_190",
@@ -6925,7 +6983,8 @@ var patterns_default = [
     title: "Ensure Azure Cognitive Search SLA for Index Updates",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_209",
@@ -6934,7 +6993,8 @@ var patterns_default = [
     title: "Ensure Azure Cognitive Search SLA for Search Index Queries",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_21",
@@ -6961,7 +7021,8 @@ var patterns_default = [
     title: "Ensure App Service Plan Suitable for Production Use",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_212",
@@ -6970,7 +7031,8 @@ var patterns_default = [
     title: "Ensure App Service Has Minimum Number of Instances for Failover",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_213",
@@ -6979,7 +7041,8 @@ var patterns_default = [
     title: "Ensure App Service Configures Health Check",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_214",
@@ -6988,7 +7051,8 @@ var patterns_default = [
     title: "Ensure App Service Is Set To Be Always On",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_215",
@@ -7096,7 +7160,8 @@ var patterns_default = [
     title: "Ensure the App Service Plan is zone redundant",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_226",
@@ -7123,7 +7188,8 @@ var patterns_default = [
     title: "Ensure Azure Event Hub Namespace is Zone Redundant",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_229",
@@ -7132,7 +7198,8 @@ var patterns_default = [
     title: "Ensure Azure SQL Database Namespace is Zone Redundant",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_23",
@@ -7159,7 +7226,8 @@ var patterns_default = [
     title: "Ensure App Service Environment is Zone Redundant",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_232",
@@ -7177,7 +7245,8 @@ var patterns_default = [
     title: "Ensure Azure Container Registry (ACR) is Zone Redundant",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_234",
@@ -7537,7 +7606,8 @@ var patterns_default = [
     title: "Ensure Storage Accounts Adhere to the Naming Rules",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_44",
@@ -7726,7 +7796,8 @@ var patterns_default = [
     title: "Ensure App Service Enables Detailed Error Messages",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_66",
@@ -7744,7 +7815,8 @@ var patterns_default = [
     title: "Ensure HTTP Version Is the Latest When Running Azure Function App",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_68",
@@ -7951,7 +8023,8 @@ var patterns_default = [
     title: "Ensure App Services Use Azure Files",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["azure"]
   },
   {
     id: "Checkov_CKV_AZURE_89",
@@ -8284,7 +8357,8 @@ var patterns_default = [
     title: "Avoid Using Update Instructions Alone in Dockerfile",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["docker"]
   },
   {
     id: "Checkov_CKV_DOCKER_6",
@@ -8293,7 +8367,8 @@ var patterns_default = [
     title: "Enforce use of LABEL maintainer instead of deprecated MAINTAINER",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["docker"]
   },
   {
     id: "Checkov_CKV_DOCKER_7",
@@ -8689,7 +8764,8 @@ var patterns_default = [
     title: "Ensure Kubernetes Clusters are Configured with Labels",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["kubernetes", "googlecloud"]
   },
   {
     id: "Checkov_CKV_GCP_22",
@@ -8770,7 +8846,8 @@ var patterns_default = [
     title: "Ensure Google Compute Firewall Ingress Does Not Allow Unrestricted RDP Access",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["ai", "ai-risk", "ai-safety"]
   },
   {
     id: "Checkov_CKV_GCP_30",
@@ -8977,7 +9054,8 @@ var patterns_default = [
     title: "Ensure PostgreSQL Database 'log_checkpoints' Flag Is Set to 'on'",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["gcp", "postgresql"]
   },
   {
     id: "Checkov_CKV_GCP_52",
@@ -9004,7 +9082,8 @@ var patterns_default = [
     title: "Ensure PostgreSQL 'log_lock_waits' Flag Is Set To 'on'",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["gcp"]
   },
   {
     id: "Checkov_CKV_GCP_55",
@@ -9022,7 +9101,8 @@ var patterns_default = [
     title: "Ensure PostgreSQL 'log_temp_files' Flag Is Set to '0'",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["gcp", "cloudsql", "postgresql"]
   },
   {
     id: "Checkov_CKV_GCP_57",
@@ -9094,7 +9174,8 @@ var patterns_default = [
     title: "Avoid Configuring a Bucket to Log to Itself",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["gcp", "googlecloudstorage"]
   },
   {
     id: "Checkov_CKV_GCP_64",
@@ -9184,7 +9265,8 @@ var patterns_default = [
     title: "Ensure Cloud Armor Prevents Message Lookup in Log4j2",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["cve"]
   },
   {
     id: "Checkov_CKV_GCP_74",
@@ -9346,7 +9428,8 @@ var patterns_default = [
     title: "Ensure 'Automatic node repair' is enabled for Kubernetes Clusters",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["gcp", "kubernetes"]
   },
   {
     id: "Checkov_CKV_GCP_90",
@@ -9760,7 +9843,8 @@ var patterns_default = [
     title: "Ensure GitHub Organization Webhooks Use HTTPS",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["github"]
   },
   {
     id: "Checkov_CKV_GITHUB_7",
@@ -9832,7 +9916,8 @@ var patterns_default = [
     title: "Enforce at Least Two Approving Reviews to Merge a GitLab Merge Request",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["gitlab"]
   },
   {
     id: "Checkov_CKV_GLB_2",
@@ -9877,7 +9962,8 @@ var patterns_default = [
     title: "Enforce CPU Requests in Kubernetes Pods",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["kubernetes"]
   },
   {
     id: "Checkov_CKV_K8S_100",
@@ -9922,7 +10008,8 @@ var patterns_default = [
     title: "Ensure Proper Setting of --terminated-pod-gc-threshold Argument",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["kubernetes"]
   },
   {
     id: "Checkov_CKV_K8S_107",
@@ -9949,7 +10036,8 @@ var patterns_default = [
     title: "Enforce CPU Limits Are Set",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["kubernetes"]
   },
   {
     id: "Checkov_CKV_K8S_110",
@@ -10048,7 +10136,8 @@ var patterns_default = [
     title: "Enforce Memory Requests in Kubernetes Pods",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["kubernetes"]
   },
   {
     id: "Checkov_CKV_K8S_121",
@@ -10066,7 +10155,8 @@ var patterns_default = [
     title: "Enforce Memory Limits Are Set",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["kubernetes"]
   },
   {
     id: "Checkov_CKV_K8S_138",
@@ -10156,7 +10246,8 @@ var patterns_default = [
     title: "Ensure --event-qps Argument Is Set Appropriately",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["kubernetes"]
   },
   {
     id: "Checkov_CKV_K8S_148",
@@ -10201,7 +10292,8 @@ var patterns_default = [
     title: "Prevent NGINX Ingress Annotation Snippets Containing LUA Code Execution",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["cve"]
   },
   {
     id: "Checkov_CKV_K8S_153",
@@ -10210,7 +10302,8 @@ var patterns_default = [
     title: "Prevent All NGINX Ingress Annotation Snippets",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["cve"]
   },
   {
     id: "Checkov_CKV_K8S_154",
@@ -10219,7 +10312,8 @@ var patterns_default = [
     title: "Prevent NGINX Ingress Annotation Snippets Containing Alias Statements",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["cve"]
   },
   {
     id: "Checkov_CKV_K8S_155",
@@ -10372,7 +10466,8 @@ var patterns_default = [
     title: "Avoid Specifying hostPort Unless Absolutely Necessary",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["kubernetes"]
   },
   {
     id: "Checkov_CKV_K8S_27",
@@ -10705,7 +10800,8 @@ var patterns_default = [
     title: "Enforce Liveness Probe Configuration in Kubernetes Pods",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["kubernetes"]
   },
   {
     id: "Checkov_CKV_K8S_80",
@@ -10795,7 +10891,8 @@ var patterns_default = [
     title: "Enforce Readiness Probe Configuration",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["kubernetes"]
   },
   {
     id: "Checkov_CKV_K8S_90",
@@ -10849,7 +10946,8 @@ var patterns_default = [
     title: "Ensure Appropriate Setting of --request-timeout Argument",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["kubernetes"]
   },
   {
     id: "Checkov_CKV_K8S_96",
@@ -11425,7 +11523,8 @@ var patterns_default = [
     title: "Ensure GET Operations Have 'produces' Field Defined",
     enabled: true,
     languages: ["JSON", "YAML", "Terraform"],
-    parameters: []
+    parameters: [],
+    tags: ["openapi"]
   },
   {
     id: "Checkov_CKV_OPENAPI_17",
@@ -12266,6 +12365,9 @@ var patterns_default = [
   }
 ];
 
+// src/pattern-mappings.json
+var pattern_mappings_default = {};
+
 // src/metadata.ts
 var descriptor = {
   id: "Checkov",
@@ -12275,7 +12377,8 @@ var descriptor = {
   filePatterns: ["**/*.tf", "**/*.yaml", "**/*.yml", "**/*.json", "**/Dockerfile"],
   supportedOS: ["linux", "darwin"],
   supportedArch: ["x64", "arm64"],
-  supportedRunners: ["local", "container"]
+  supportedRunners: ["local", "container"],
+  frameworkMappings: pattern_mappings_default
 };
 
 // src/adapter.ts
@@ -12325,6 +12428,7 @@ function stripLeadingSlash(filePath) {
 }
 var adapter = {
   ...descriptor,
+  patternsMetadata: patterns_default,
   compatibleVersions: ">=3.0.0",
   website: "https://www.checkov.io/",
   prerequisites: [

package/dist/metadata.js

@@ -23,6 +23,11 @@ __export(metadata_exports, {
   descriptor: () => descriptor
 });
 module.exports = __toCommonJS(metadata_exports);
+
+// src/pattern-mappings.json
+var pattern_mappings_default = {};
+
+// src/metadata.ts
 var descriptor = {
   id: "Checkov",
   displayName: "Checkov",
@@ -31,7 +36,8 @@ var descriptor = {
   filePatterns: ["**/*.tf", "**/*.yaml", "**/*.yml", "**/*.json", "**/Dockerfile"],
   supportedOS: ["linux", "darwin"],
   supportedArch: ["x64", "arm64"],
-  supportedRunners: ["local", "container"]
+  supportedRunners: ["local", "container"],
+  frameworkMappings: pattern_mappings_default
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/tools-checkov-3",
-  "version": "0.6.2",
+  "version": "0.8.0",
   "description": "Checkov adapter — CLI-mode IaC security scanner",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -8,7 +8,7 @@
     "dist"
   ],
   "dependencies": {
-    "@codacy/tooling": "0.6.2"
+    "@codacy/tooling": "0.8.0"
   },
   "license": "MIT",
   "author": "Codacy <support@codacy.com> (https://www.codacy.com)",