Checkov does not detect hardcoded connection strings in Bicep appSettingsKeyValuePairs

[ibadichi-whitesource]

Description:
Checkov does not flag hardcoded connection strings in appSettingsKeyValuePairs when scanning a Bicep file.
This is a security risk because connection strings may be leaked in configuration.

Steps to Reproduce:

1. Create a main.bicep file with the following snippet:

appSettingsKeyValuePairs: {
AppConfiguration__CCaaSConnectionString: appConfig.listKeys().value[0].connectionString
AppConfiguration__ConnectionString: emsAppConfigConnectionString
FUNCTIONS_EXTENSION_VERSION: '~4'
FUNCTIONS_WORKER_RUNTIME: 'dotnet'
}

2. Run Checkov against the Bicep file:

checkov --directory . --framework bicep

3. No security warnings are reported, even though ConnectionString values are hardcoded.

Expected Behavior:
Checkov should flag any hardcoded connection strings in appSettingsKeyValuePairs as a potential