chore(deps): bump github.com/aquasecurity/tfsec from 1.8.0 to 1.19.0

[dependabot[bot]]

Bumps github.com/aquasecurity/tfsec from 1.8.0 to 1.19.0.

Release notes

Sourced from github.com/aquasecurity/tfsec's releases.

v1.19.0

What's Changed

• feat(flag): Add var-file flag in to duplicate tfvar-file by @​owenrumney in aquasecurity/tfsec#1683
• docs: Add link to Rego documentation by @​atombrella in aquasecurity/tfsec#1686
• feat(defsec): Add support for applying rego rules to IAM policies by @​liamg in aquasecurity/tfsec#1676
• chore(deps): bump actions/stale from 4 to 5 by @​dependabot in aquasecurity/tfsec#1673
• chore(deps): bump actions/setup-go from 2 to 3 by @​dependabot in aquasecurity/tfsec#1672
• feat: Use new defsec options and improve path handling by @​liamg in aquasecurity/tfsec#1696
• chore(deps): bump crazy-max/ghaction-import-gpg from 4.3.0 to 4.4.0 by @​dependabot in aquasecurity/tfsec#1697
• chore(deps): bump defsec version by @​owenrumney in aquasecurity/tfsec#1699
• test: add tests for aws redshift tf adapters by @​vanesasejdiu in aquasecurity/defsec#527
• fix(rule): GCP dnssec not applicable for private zones by @​owenrumney in aquasecurity/defsec#539
• test: add tests for aws lambda tf adapters by @​vanesasejdiu in aquasecurity/defsec#529

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.18.0...v1.19.0

v1.18.0

What's Changed

• fix: remove duplication of checksum by @​owenrumney in aquasecurity/tfsec#1665
• feat(rego): Add --rego-only flag to run rego policies exclusively by @​liamg in aquasecurity/tfsec#1667
• fix(rego): Fix code highlighting for rego detections by @​liamg in aquasecurity/tfsec#1668

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.17.0...v1.18.0

v1.17.0

What's Changed

Changes to tfsec

• chore(defsec): Update defsec to v0.34.0 by @​liamg in aquasecurity/tfsec#1666

Changes to defsec

• build(actions): Add cache action to speed up builds by @​liamg in aquasecurity/defsec#487
• fix(cloudformation): Fix margin removal for empty lines by @​liamg in aquasecurity/defsec#490
• fix(azurerm): Fix false positive on key vault secret expiration by @​liamg in aquasecurity/defsec#494
• fix(check): Fix false positive for azure network security rules by @​liamg in aquasecurity/defsec#498
• fix(avd): Fix avd docs generation by @​liamg in aquasecurity/defsec#499
• test(avd): Add test to ensure all avd docs are generated by @​liamg in aquasecurity/defsec#500
• fix(google): Fix GKE legacy endpoint use detection by @​liamg in aquasecurity/defsec#497
• feat(cf): Add support for AES256 enryption for s3 bucket in cloudformation by @​liamg in aquasecurity/defsec#496
• fix(check): Fix false positive for api gateway cache encryption by @​liamg in aquasecurity/defsec#495
• feat(azurerm): Add support for container logging via changes in latest azurerm terraform provider by @​liamg in aquasecurity/defsec#492
• feat(check): Add separate check for SNS encryption with CMK by @​liamg in aquasecurity/defsec#493
• feat(check): Add separate check for SQS CMK use by @​liamg in aquasecurity/defsec#491

Full Changelog: https://github.com/aquasecurity/tfsec/compare/v1.16.3...v1.17.0

... (truncated)

Commits

• 8a9dd66 chore(deps): bump defsec version (#1699)
• eebb900 chore(deps): bump crazy-max/ghaction-import-gpg from 4.3.0 to 4.4.0 (#1697)
• 72e6e6f feat: Use new defsec options and improve path handling (#1696)
• fb77a78 chore(deps): bump actions/setup-go from 2 to 3 (#1672)
• 4988bf8 chore(deps): bump actions/stale from 4 to 5 (#1673)
• b37d0a8 feat(defsec): Add support for applying rego rules to IAM policies (#1676)
• 420802f Add link to Rego documentation (#1686)
• d47a86d feat(flag): Add var-file flag in to duplicate tfvar-file (#1683)
• cbc4a37 fix(rego): Fix code highlighting for rego detections (#1668)
• 0284098 feat(rego): Add --rego-only flag to run rego policies exclusively (#1667)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #508.