fix(terraform): include 90-day boundary in rotation check CKV_AWS_304 (…

…#7544)

fix(CKV_AWS_304): include 90-day boundary in rotation check

Change SecretManagerSecret90days to use <= 90 instead of < 90,
so that secrets rotated exactly every 90 days are considered compliant.

Updated test fixtures and assertions to cover the boundary case.

Co-authored-by: Yuval Michaeli <ymichaeli@paloaltonetworks.com>

fix(secrets): report all multiline regex matches per file, not just f…

…irst occurrence - FIX (#7540)

* initial impl

* fix log

* fix log

feat(secrets): Revert "fix(secrets): report all multiline regex match…

…es per file, not just first occurrence" (#7537)

Revert "fix(secrets): report all multiline regex matches per file, not just f…"

This reverts commit fa12dd6.

fix(helm): Accept helm version greater than v3 (#7399)

* Accept any version greater than v4

* Update docs as well

* simpler string check

* Add a bunch o stuff I missed

* clean up indent

* Pinned to major version 3 and 4

* Do not bubble up exception

* clean

* clean

* chore(lint): fix dead var lint

---------

Co-authored-by: Aidan Hall <aidan.hall@kindredgroup.com>
Co-authored-by: Max Amelchenko <maxamel2002@gmail.com>

fix(terraform): fix wrong windows path (#7529)

* fix wrong windows path

* fix lint

* cr fixes

* add tests

---------

Co-authored-by: Yuval Michaeli <ymichaeli@paloaltonetworks.com>

fix(sca): Align ImageScanner.run_image_scan with execute_scan (#7518)

fix(sca_image): align ImageScanner.run_image_scan with execute_scan

- build twistcli args as an explicit list (consistent with sca_image runner)

- reuse validate_image_id() before invoking twistcli

- redact --token value in twistcli debug/error logs

- add unit tests for arg construction, validation and redaction

fix(general): Revert Switch Terraform regex eval to RE2 for better pe…

…rformance (#7520)

Revert "fix(general): Switch Terraform regex eval to RE2 for better performan…"

This reverts commit c673bf6.

fix(general): Strip unnecessary control bytes from CLI code block (#7515

)

fix(output): strip unnecessary control bytes from CLI code block

fix(general): make version cache init lazy (#7509)

* make cache init lazy

* cache lazy init unit tests

* cache lazy init unit tests

fix(general): make version cache init lazy (#7509)

* make cache init lazy

* cache lazy init unit tests

* cache lazy init unit tests