lint/.github/linters/.checkov.yaml
Marco Ferrari 9d7268fb99
feat: add support for checkov to lint iac files (#4925)
- Add support to run Checkov against infrastructure as code descriptors
  that are in a given (configurable) directory. Defaults to lint the
  whole workspace.
- Establish a baseline for our own codebase so we don't have to fix
  issues right away with this change.
2023-12-22 13:22:15 +01:00

29 lines
888 B
YAML

---
# Options reference: https://www.checkov.io/2.Basics/CLI%20Command%20Reference.html
# Establish a baseline so we don't have to fix these issues at the same time
# as we ship Checkov with super-linter.
baseline: .github/linters/.checkov.baseline
# Report skipped baseline checks in the output
output-baseline-as-skipped: true
# Don't report passed checks in output
quiet: true
# The tests directory contains files that we need for test cases that are
# expected to fail. Checkov would catch those issues, so we exclude the tests
# directory.
skip-path:
- test/linters/ansible
- test/linters/arm
- test/linters/checkov/bad
- test/linters/dockerfile_hadolint
- test/linters/jscpd
- test/linters/json
- test/linters/kubernetes_kubeconform
- test/linters/openapi
- test/linters/terraform_fmt
- test/linters/terraform_tflint
- test/linters/terraform_terrascan
...