NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
PyPI · #1030 most downloaded on PyPI
Infrastructure as code static analysis
Last release today
17 Sep 2026
Ships fairly regularly
a new release about every 2 weeks
Most releases are documented
notes for 49 of the last 60 stable releases
1 version withdrawn
withdrawn after publishing
7 years old
3765 releases · first in 2019
One column per quarter.
general: Fix support for git external module syntax 'git::git@' - #7175
Nothing published for this version
secrets: Revert - Bump detect secrets - #7171
secrets: Bump detect secrets - #7158
Nothing published for this version
terraform: Add SNS check and modify some - #7154
Nothing published for this version
secrets: git-history allow scan by commits list - #7155
Nothing published for this version
kustomize: export get kustomize resource id to a function - #7153
Nothing published for this version
Nothing published for this version
## Breaking Change - general: Remove OpenAI - #7146
terraform_plan: use provider name not resource address to fix supported_provider matching - #7119
general: using asteval instead of using eval - #7116
terraform: Fix protocols for CKV2_AWS_74 and fix for CKV2_K8S_5 - #7134
terraform: Add new check for overly permissive SQS policy - #7125
Nothing published for this version
secrets: Add support in git history for producer consumer - #7123
Nothing published for this version
Nothing published for this version
terraform: Over permissive Lambda Cors check (Terraform & Cloudformation) - #7113
terraform: Add new check and update old around cipher suites - #7108
kustomize: handle kustomize file with empty resources section - #7109
Nothing published for this version
terraform: Fix for multiple checks - #7097
cloudformation: Update Lambda Runtime checks - #7065
terraform: Change to valid name - #7089
Nothing published for this version
general: typos discovered by codespell - #7012
Nothing published for this version
general: handle connected_node tuple in CustomJSONEncoder for json report (#7062) - #7063
- no noteworthy changes
terraform: Fix keeping range a range - #7073
serverless: add check for empty resource attributes - #7074
terraform: Fix CKV2_GCP_12 and a few tests - #7069
general: Updated correct connected_node when creating graph report out of all options - #7068
terraform_plan: Run provider checks against all providers in plan - #7061
secrets: Bump detect-secrets to not flag AZ secrets in plan files - #7064
terraform: add raw tf resource to graph - #7047
Nothing published for this version
Nothing published for this version
Nothing published for this version
- no noteworthy changes
terraform: Update all resources - #7049
terraform: Update CKV_ALI_1 - #7040
serverless: add tags enrichment to serverless - #7044
secrets: Bump detect-secrets to remove more lock files - #7039
general: prevent connected_node attribute from being overriden - #7032
Nothing published for this version
terraform: Add azure DB checks for flexible server private endpoints - #7030
secrets: Remove CKV_SECRET_80 instead of CKV_SECRET_6 - #7029
terraform: adding 3 policies & tests - #7011
Nothing published for this version
Nothing published for this version
Nothing published for this version
terraform: CKV_GCP_74, CKV_GCP_76 incorrectly enforced for REGIONAL and GLOBAL managed proxy networks - #7002
terraform: Add multiple checks - #7016
Nothing published for this version
general: Handle ECS enhanced container insights - #7001
Your coding agent can read these notes before it upgrades. Set up the MCP server →