infrastructure-as-code

Description

file.replace with backslash_literal throwing the following traceback.

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/salt/cli/caller.py", line 218, in call
    ret["return"] = self.minion.executors[fname](
  File "/usr/lib/python3/dist-packages/salt/loader/lazy.py", line 149, in __call__
    return self.loader.run(run_func, *args, **kwargs

Description

Podman uses Dockerfile as well as Containerfile as filenames for the container build (ref), but at the moment, trivy does not detect Containerfile as a valid config file to be analyzed.

Since the same syntax is used for the image building, it would be interesting to add Containerfile as a "synonym" of `Docker

Describe the bug

When I create a Subnet using ec2.Subnet.from_subnet_attributes and don't specify a routeTableId, I'm getting the following warning:

[Warning at /euc1-dv-rest-alb-alb/subnet-0] No routeTableId was provided to the subnet at 'euc1-dv-rest-alb-alb/subnet-0'. Attempting to read its .routeTable.routeTableId will return null/undefined. (More info: https://github

I suggest adding MongoDB Atlas to the supported cloud as a feather.

With v0.9.22 of the CLI, I took me a while to debug an issue as infracost breakdown --path examples/terraform --usage-file BLAH.yaml worked even though the file BLAH.yaml didn't exist. We should throw a nice error like we do for the config-file:

> infracost breakdown --config-file BLAH.yaml
Error: config file does not exist at BLAH.yaml

Describe the issue
Checkov cli output is heavily targeted for a dark background. Using a light theme makes it very hard to read.
Is there a way to remove color or control the theme used?

Version:

• Checkov Version 2.0.1050

Additional context
Small search I found you use termcolor: https://github.com/bridgecrewio/checkov/blob/d55c68ff909c65e341e91938c13a155c99601f5f/checkov/c

• terrascan version: 1.9.0
• terraform version: 1.0.1

Enhancement Request

Other security scanning tools (e.g. checkov and tfsec) have a --soft-fail flag or equivalent option that allows you to always exit with 0 status.

Extremely useful when running the tool without halting a pipeline for example.

I currently use a workaround, but something more concrete would be very desira

The --prod flag has been deprecated, so we should not show that field in the output of the env show command, or in our docs:

https://aws.github.io/copilot-cli/docs/concepts/environments/
https://aws.github.io/copilot-cli/docs/commands/env-show/

Description

Add GCE support for google_project_iam_custom_role (TF)

Sources

• Terraform Resource Documentation
• GCP Resource Documentation