scans

Describe the solution you'd like
I'd like to go back to using a CHANGELOG.md to track changes. This will be the first step in updating the ci/cd process to increase the frequency of patches/deploys.

Additional context
Go through https://github.com/zricethezav/gitleaks/releases and create a CHANGELOG.md file

cc @zricethezav

Describe the bug
Check: CKV2_AWS_1: "Ensure that all NACL are attached to subnets"
FAILED for resource: aws_network_acl.elasticache
File: /tfplan.json:2623-2683
Guide: https://docs.bridgecrew.io/docs/ensure-that-all-nacl-are-attached-to-subnets

2624 |               "values": {
2625 |                 "arn": "arn:aws:ec2:us-east-1:907320361432:network-acl/acl-0ed5xxxx42a675e",
2626 |

• terrascan version: 1.9.0
• terraform version: 1.0.1

Enhancement Request

Other security scanning tools (e.g. checkov and tfsec) have a --soft-fail flag or equivalent option that allows you to always exit with 0 status.

Extremely useful when running the tool without halting a pipeline for example.

I currently use a workaround, but something more concrete would be very desira

Masscan (with --banners) together with Nmap fingerprints often discover services named "reverse-ssl" by Nmap. Such banners contain SSL client hello and may be enough to identify the client JA3 fingerprint.

The same outputs (structured and human readable) as those built from passive data should be used.

Is your feature request related to a problem? Please describe.
Whenever I update one of my dependencies in a bazel workspace, I often have to reset the SHA for one of my [package-type].bzl files since these also contain SHA hashes that are not sensitive and talisman interprets as secrets.

Describe the solution you'd like
The 'node' scope fixed a similar problem I had with the package-

I think that you are doing a very necessary system and your idea is cool, but at the moment it has a lot of bugs. From what I noticed, the assets do not understand the ascii characters and the system crashes. In addition, I did not find a description of the API, I would like to integrate your system into TheHive, or rather make it possible to view information about an asset in TheHive. I believe t

Implement graph widgets on the main dashboards

Daily Github pulls
55% increase in Git pulls today.

Push Authorizations
20% increase in git-pushes waiting authorization

Push Rejections
5% rejection increase