Syntax errors when terraform functions are used

[tberreis]

Describe the issue
With release 3.2.415, PR #7116 checkov started to throw syntax errors when functions are used in terraform code.

Examples
Minimal example

# cat main.tf
locals {
  suffix = basename(abspath(path.module))
  name   = "foo-${local.suffix}"
}

output "test" {
  value = local.name
}

With checkov 3.2.414:

# docker run -v $PWD:/data --rm -it docker.io/bridgecrew/checkov:3.2.414 -d /data --compact


       _               _
   ___| |__   ___  ___| | _______   __
  / __| '_ \ / _ \/ __| |/ / _ \ \ / /
 | (__| | | |  __/ (__|   < (_) \ V /
  \___|_| |_|\___|\___|_|\_\___/ \_/

By Prisma Cloud | version: 3.2.414
Update available 3.2.414 -> 3.2.424
Run pip3 install -U checkov to update

With checkov 3.2.415:

# docker run -v $PWD:/data --rm -it docker.io/bridgecrew/checkov:3.2.415 -d /data --compact
   foo-${basename(abspath(path.module))}
SyntaxError: invalid syntax (<unknown>, line 1)
   ${basename(abspath(path.module))}
SyntaxError: invalid syntax (<unknown>, line 1)
   foo-${basename(abspath(path.module))}
SyntaxError: invalid syntax (<unknown>, line 1)


       _               _
   ___| |__   ___  ___| | _______   __
  / __| '_ \ / _ \/ __| |/ / _ \ \ / /
 | (__| | | |  __/ (__|   < (_) \ V /
  \___|_| |_|\___|\___|_|\_\___/ \_/

By Prisma Cloud | version: 3.2.415
Update available 3.2.415 -> 3.2.424
Run pip3 install -U checkov to update

However the policies are checked correctly.

Example:

locals {
  suffix = basename(abspath(path.module))
  name   = "foo-${local.suffix}"
}

output "test" {
  value = local.name
}

resource "azurerm_storage_account" "this" {
  #checkov:skip=CKV2_AZURE_33
  name                            = "storageaccountname"
  resource_group_name             = azurerm_resource_group.example.name
  location                        = azurerm_resource_group.example.location
  account_tier                    = "Standard"
  account_replication_type        = "GRS"
  min_tls_version                 = TLS1_2
  public_network_access_enabled   = false
  shared_access_key_enabled       = false
  allow_nested_items_to_be_public = false

  blob_properties {
    delete_retention_policy {
      days = 7
    }
  }

  tags = {
    environment = "staging"
  }
}

With 3.2.414:

# docker run -v $PWD:/data --rm -it docker.io/bridgecrew/checkov:3.2.414 -d /data --quiet --compact
terraform scan results:

Passed checks: 12, Failed checks: 2, Skipped checks: 1

Check: CKV_AZURE_33: "Ensure Storage logging is enabled for Queue service for read, write and delete requests"
        FAILED for resource: azurerm_storage_account.this
        File: /main.tf:10-31
        Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/azure-policies/azure-logging-policies/enable-requests-on-storage-logging-for-queue-service
Check: CKV2_AZURE_1: "Ensure storage for critical data are encrypted with Customer Managed Key"
        FAILED for resource: azurerm_storage_account.this
        File: /main.tf:10-31
        Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/azure-policies/azure-general-policies/ensure-storage-for-critical-data-are-encrypted-with-customer-managed-key

With 3.2.415:

# docker run -v $PWD:/data --rm -it docker.io/bridgecrew/checkov:3.2.415 -d /data --quiet --compact
   foo-${basename(abspath(path.module))}
SyntaxError: invalid syntax (<unknown>, line 1)
   ${basename(abspath(path.module))}
SyntaxError: invalid syntax (<unknown>, line 1)
   foo-${basename(abspath(path.module))}
SyntaxError: invalid syntax (<unknown>, line 1)
   ${azurerm_resource_group.example.location}
SyntaxError: invalid syntax (<unknown>, line 1)
   ${TLS1_2}
SyntaxError: invalid syntax (<unknown>, line 1)
   ${azurerm_resource_group.example.name}
SyntaxError: invalid syntax (<unknown>, line 1)
terraform scan results:

Passed checks: 12, Failed checks: 2, Skipped checks: 1

Check: CKV_AZURE_33: "Ensure Storage logging is enabled for Queue service for read, write and delete requests"
        FAILED for resource: azurerm_storage_account.this
        File: /main.tf:10-31
        Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/azure-policies/azure-logging-policies/enable-requests-on-storage-logging-for-queue-service
Check: CKV2_AZURE_1: "Ensure storage for critical data are encrypted with Customer Managed Key"
        FAILED for resource: azurerm_storage_account.this
        File: /main.tf:10-31
        Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/azure-policies/azure-general-policies/ensure-storage-for-critical-data-are-encrypted-with-customer-managed-key

Version (please complete the following information):

• Checkov Version 3.2.415+

Additional context
-/-

[olefemmy]

This is related to #7144.

[tsmithv11]

Should be fixed with #7172