fix(query): various fixes for passwords and secrets queries #8017

Draft

cx-andre-pereira wants to merge 13 commits intoCheckmarx:masterfrom

cx-andre-pereira:Fixs_to_Passwords_and_Secrets

Commits on Mar 25, 2026

Added check to ensure files of 'Kind' proto are ignored by 'Inspect', stoping passwords and secrets flags on said files
cx-andre-pereira
committed

Commits on Mar 26, 2026

Changed approach, proto files should flag if they have secrets within commented lines, new allow rules prevent proto files fields from flagging
cx-andre-pereira
committed
Fix expected results
cx-andre-pereira
committed
Part 1 fix git diff
cx-andre-pereira
committed
Part 2 fix git diff
cx-andre-pereira
committed
Fix regex rules (duplicated rule was removed but comma was missed)
cx-andre-pereira
committed
Two more allow rules plus updated negative sample
cx-andre-pereira
committed
Fallback, generic secret reqires 10 digits (impossible in proto) and generic api key enforces trimmed line starting with 'access'
cx-andre-pereira
committed
Removed unnecessar allow rule
cx-andre-pereira
committed
Improved negative28 tests used for TF resource access allow rule in 'Generic Token', improved 2 TF reousrce access rules, added missing positive test for 'Encryption Key' query, added samples (simi…
cx-andre-pereira
committed

Commits on Mar 27, 2026