build(deps): bump checkov from 3.3.24 to 3.3.26 in /aws-cli

[dependabot]

Bumps checkov from 3.3.24 to 3.3.26.

Release notes

Sourced from checkov's releases.

3.3.26

Bug Fix

• terraform_plan: resolve for_each module calls in plan parser - #7723

3.3.25

Bug Fix

• helm: source folder should be within the directory - #7722
• kustomize: fix file path logic - #7720
• terraform: avoid tmp_path in git loader tests - #7726
• terraform: external module ref keeps inside directory - #7721

Changelog

Sourced from checkov's changelog.

3.3.26 - 2026-10-07

Bug Fix

• terraform_plan: resolve for_each module calls in plan parser - #7723

3.3.25 - 2026-10-06

Bug Fix

• helm: source folder should be within the directory - #7722
• kustomize: fix file path logic - #7720
• terraform: avoid tmp_path in git loader tests - #7726
• terraform: external module ref keeps inside directory - #7721

3.3.23 - 2026-10-05

Bug Fix

• sca: apply --skip-path regex and hidden-dir filtering to sca_package - #7712

3.3.21 - 2026-09-30

Bug Fix

• terraform_json: handle HCL JSON array and single-dict block formats in parser - #7707

3.3.20 - 2026-09-27

Bug Fix

• terraform_plan: skip resources being removed from state ('forget' action) - #7676

3.3.19 - 2026-09-17

Feature

• terraform: add CKV_AWS_394 for unconstrained aws_availability_zones data source - #7658

3.3.17 - 2026-09-10

Bug Fix

• general: honour scope.provider for platform-downloaded custom po… - #7677

3.3.16 - 2026-08-30

Bug Fix

• terraform: Added current Azure Terraform resources and taggable resources as of hashicorp/azurerm provider version 4.81 - #7652

... (truncated)

Commits

• e5f995a fix(terraform): avoid tmp_path in git loader tests (#7726)
• e41b628 fix(terraform_plan): resolve for_each module calls in plan parser (#7723)
• 4b1a112 chore: update release notes
• 7cae988 Merge 53850993ebde3eefcc01a735928c1ebf3773e31c into f2967cbc86d62880619f69630...
• 1af12e0 fix(terraform): avoid tmp_path in git loader tests (#7726)
• f2967cb fix(helm): source folder should be within the directory (#7722)
• 78967fc fix(terraform): external module ref keeps inside directory (#7721)
• See full diff in compare view

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
pip/checkov	3.3.26	🟢 7	Details Check Score Reason Maintained 🟢 10 30 commit(s) out of 30 and 7 issue activity out of 30 found in the last 90 days -- score normalized to 10 Code-Review 🟢 3 11 out of last 30 changesets reviewed before merge -- score normalized to 3 Vulnerabilities 🟢 10 no vulnerabilities detected CII-Best-Practices ⚠️ 2 badge detected: in_progress Signed-Releases ⚠️ -1 no releases found Branch-Protection 🟢 6 branch protection is not maximal on development and all release branches Token-Permissions ⚠️ 0 non read-only tokens detected in GitHub workflows Security-Policy 🟢 10 security policy file detected License 🟢 10 license file detected Dependency-Update-Tool 🟢 10 update tool detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Fuzzing ⚠️ 0 project is not fuzzed SAST 🟢 10 SAST tool is run on all commits Binary-Artifacts 🟢 10 no binaries found in the repo Packaging 🟢 10 publishing workflow detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0

Scanned Files

• aws-cli/requirements.txt