infrastructure-as-code

Description
I tried to use the state aptpkg.held as shown in the documentation, only for that state to apparently not exist.

I tried looping through state modules such as apt, pkg, and aptpkg with hold and held states, to find apt.held as the actually correct usage.

$ for major in apt pkg ap

According to the Debain wiki keys “MUST NOT be placed in /etc/apt/trusted.gpg.d or loaded by apt-key add.”: https://wiki.debian.org/DebianRepository/UseThirdParty

So instead of this:

wget -qO - https://aquasecurity.github.io/trivy-repo/deb/public.key | sudo apt-key add -
echo deb https://aquasecurity.github.io/trivy-repo/deb $(lsb_release -sc) main | sudo tee -a /etc/apt/sources.

Describe the feature

Use Case

Ability to upgrade canaries to latest runtime

Proposed Solution

Add new constant here called SYNTHETICS_NODEJS_PUPPETEER_3_6 with value new Ru

When setting INFRACOST_CURRENCY=EUR the format of the currency values is not correct.

Current Format

• Example in USD $3,938.10
• Example in EUR €3,736.11

Expected format

• Example in EUR: 3.736,11€

To make it as flexible as possible, it would be helpfull do define an addition environment variable to define the logic like

• EUR: XXX.XXX,00
• USD: XXX,XXX.00

USD can be

Describe the issue
On GCP if you apply a role via a policy that is applied none of the checks are performed. The example below should pass CKV_GCP_48 and fail CKV_GCP_44 (with my variables) but when checkov is run, no checks are run, pass or fail.

Examples\

 data "google_iam_policy" "folder" {
   binding {
     role = "roles/owner"

     members = var.a

• terrascan version: 1.9.0
• terraform version: 1.0.1

Enhancement Request

Other security scanning tools (e.g. checkov and tfsec) have a --soft-fail flag or equivalent option that allows you to always exit with 0 status.

Extremely useful when running the tool without halting a pipeline for example.

I currently use a workaround, but something more concrete would be very desira

The --prod flag has been deprecated, so we should not show that field in the output of the env show command, or in our docs:

https://aws.github.io/copilot-cli/docs/concepts/environments/
https://aws.github.io/copilot-cli/docs/commands/env-show/

Description
One user found a useless timeouts block in its scan for aws_route_table resource. We should ignore it to avoid false positive drifts.

How to reproduce
Create a `aws_rou