chore(mise): update tool pipx:checkov to v3.3.17 [automerge]

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pipx:checkov	3.3.16 → 3.3.17

---

Release Notes

bridgecrewio/checkov (pipx:checkov)

v3.3.17

Compare Source

Bug Fix

• general: honour scope.provider for platform-downloaded custom po… - #​7677

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • "every weekend,on Friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Important

Review skipped

Review was skipped as selected files did not have any reviewable changes.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: fa04c408-1410-4667-b024-a954e4079bf1

📥 Commits

Reviewing files that changed from the base of the PR and between 4c2b0a9 and c22bfd3.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: e35e79d8-a54e-40ad-b0ff-e9ef7b93ba55

📥 Commits

Reviewing files that changed from the base of the PR and between 3bf97f3 and 4c2b0a9.

📒 Files selected for processing (1)

• .mise.toml

Included review availability: Your plan provides up to 10 included reviews per hour; 8 remain after this review.

---

📝 Walkthrough

Walkthrough

The mise configuration updates the pinned pipx:checkov version from 3.3.16 to 3.3.17.

Changes

Checkov Version Pin

Layer / File(s)	Summary
Update Checkov version .mise.toml	The pinned pipx:checkov version changes from 3.3.16 to 3.3.17.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other

Suggested reviewers: devsecninja

Merge Risk: ⚪ Minimal · up to 4c2b0

This PR updates the pinned Checkov patch version. No material merge-blocking risk is evident from the supplied change context.

Architecture Summary

Architecture risk: 🔵 Low · up to 4c2b0

The changed surface does not map to a changed system, dependency edge, entrypoint, or external dependency.

Changed systems: None identified.

Architecture concerns
No architecture-level concerns identified.

Review details

Before / after behavior

• observed — Modified behavior in .mise.toml: The pinned pipx:checkov version changed from 3.3.16 to 3.3.17.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the pipx:checkov tool update to version 3.3.17. The chore and automerge labels are relevant and do not obscure the main change.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}